In the Linux kernel, the following vulnerability has been resolved:
ocfs2: prevent release journal inode after journal shutdown
Before calling ocfs2deleteosb(), ocfs2journalshutdown() has already been executed in ocfs2dismountvolume(), so osb->journal must be NULL. Therefore, the following calltrace will inevitably fail when it reaches jbd2journalreleasejbdinode().
ocfs2dismountvolume()-> ocfs2deleteosb()-> ocfs2freeslotinfo()-> _ocfs2freeslotinfo()-> evict()-> ocfs2evictinode()-> ocfs2clearinode()-> jbd2journalreleasejbdinode(osb->journal->jjournal,
Adding osb->journal checks will prevent null-ptr-deref during the above execution path.
[
{
"target": {
"file": "fs/ocfs2/inode.c",
"function": "ocfs2_clear_inode"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e9188f66e94955431ddbe2cd1cdf8ff2bb486abf",
"signature_version": "v1",
"digest": {
"length": 2257.0,
"function_hash": "224987983871917271622834909964333049308"
},
"signature_type": "Function",
"id": "CVE-2025-39842-1109dbb4",
"deprecated": false
},
{
"target": {
"file": "fs/ocfs2/inode.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f46e8ef8bb7b452584f2e75337b619ac51a7cadf",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"161890204026058726937018117857517262816",
"146139060562155805491026516546718848754",
"265289373173929928526397929730114252369"
]
},
"signature_type": "Line",
"id": "CVE-2025-39842-2e29327d",
"deprecated": false
},
{
"target": {
"file": "fs/ocfs2/inode.c",
"function": "ocfs2_clear_inode"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@85e66331b60601d903cceaf8c10a234db863cd78",
"signature_version": "v1",
"digest": {
"length": 2257.0,
"function_hash": "224987983871917271622834909964333049308"
},
"signature_type": "Function",
"id": "CVE-2025-39842-349c3368",
"deprecated": false
},
{
"target": {
"file": "fs/ocfs2/inode.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e9188f66e94955431ddbe2cd1cdf8ff2bb486abf",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"161890204026058726937018117857517262816",
"146139060562155805491026516546718848754",
"265289373173929928526397929730114252369"
]
},
"signature_type": "Line",
"id": "CVE-2025-39842-5e77fee1",
"deprecated": false
},
{
"target": {
"file": "fs/ocfs2/inode.c",
"function": "ocfs2_clear_inode"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f4a917e6cd6c798f7adf39907f117fc754db1283",
"signature_version": "v1",
"digest": {
"length": 2257.0,
"function_hash": "224987983871917271622834909964333049308"
},
"signature_type": "Function",
"id": "CVE-2025-39842-64d758b0",
"deprecated": false
},
{
"target": {
"file": "fs/ocfs2/inode.c",
"function": "ocfs2_clear_inode"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@42c415c53ad2065088cc411d08925effa5b3d255",
"signature_version": "v1",
"digest": {
"length": 2257.0,
"function_hash": "224987983871917271622834909964333049308"
},
"signature_type": "Function",
"id": "CVE-2025-39842-65af5d20",
"deprecated": false
},
{
"target": {
"file": "fs/ocfs2/inode.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@85e66331b60601d903cceaf8c10a234db863cd78",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"161890204026058726937018117857517262816",
"146139060562155805491026516546718848754",
"265289373173929928526397929730114252369"
]
},
"signature_type": "Line",
"id": "CVE-2025-39842-821310cc",
"deprecated": false
},
{
"target": {
"file": "fs/ocfs2/inode.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f4a917e6cd6c798f7adf39907f117fc754db1283",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"161890204026058726937018117857517262816",
"146139060562155805491026516546718848754",
"265289373173929928526397929730114252369"
]
},
"signature_type": "Line",
"id": "CVE-2025-39842-aa0c4890",
"deprecated": false
},
{
"target": {
"file": "fs/ocfs2/inode.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@42c415c53ad2065088cc411d08925effa5b3d255",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"161890204026058726937018117857517262816",
"146139060562155805491026516546718848754",
"265289373173929928526397929730114252369"
]
},
"signature_type": "Line",
"id": "CVE-2025-39842-cf9609df",
"deprecated": false
},
{
"target": {
"file": "fs/ocfs2/inode.c",
"function": "ocfs2_clear_inode"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f46e8ef8bb7b452584f2e75337b619ac51a7cadf",
"signature_version": "v1",
"digest": {
"length": 2257.0,
"function_hash": "224987983871917271622834909964333049308"
},
"signature_type": "Function",
"id": "CVE-2025-39842-da8ad44b",
"deprecated": false
}
]