In the Linux kernel, the following vulnerability has been resolved:
jbd2: remove wrong sb->s_sequence check
Journal emptiness is not determined by sb->ssequence == 0 but rather by sb->sstart == 0 (which is set a few lines above). Furthermore 0 is a valid transaction ID so the check can spuriously trigger. Remove the invalid WARN_ON.
[
{
"id": "CVE-2025-37839-10632911",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b4643ffaf72d7a5a357e9bf68b1775f8cfe7e77",
"target": {
"function": "jbd2_journal_update_sb_log_tail",
"file": "fs/jbd2/journal.c"
},
"digest": {
"length": 784.0,
"function_hash": "45535171005284367611802563277459358168"
},
"signature_type": "Function"
},
{
"id": "CVE-2025-37839-28844d0e",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b0cca357f85beb6144ab60c62dcc98508cc044bf",
"target": {
"file": "fs/jbd2/journal.c"
},
"digest": {
"line_hashes": [
"98633598272538615078467208136182413261",
"233645578522013672011303403099810554023",
"235322959096880780419502147625399466916",
"338937744151716987229094746156436682384"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2025-37839-3ffacbc9",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c88f7328bb0fff66520fc9164f02b1d06e083c1b",
"target": {
"file": "fs/jbd2/journal.c"
},
"digest": {
"line_hashes": [
"98633598272538615078467208136182413261",
"233645578522013672011303403099810554023",
"235322959096880780419502147625399466916",
"338937744151716987229094746156436682384"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2025-37839-90257c94",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b4643ffaf72d7a5a357e9bf68b1775f8cfe7e77",
"target": {
"file": "fs/jbd2/journal.c"
},
"digest": {
"line_hashes": [
"98633598272538615078467208136182413261",
"233645578522013672011303403099810554023",
"235322959096880780419502147625399466916",
"338937744151716987229094746156436682384"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2025-37839-b832e86c",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b0cca357f85beb6144ab60c62dcc98508cc044bf",
"target": {
"function": "jbd2_journal_update_sb_log_tail",
"file": "fs/jbd2/journal.c"
},
"digest": {
"length": 737.0,
"function_hash": "3667883157858070986544579572562182540"
},
"signature_type": "Function"
},
{
"id": "CVE-2025-37839-ef230f49",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c88f7328bb0fff66520fc9164f02b1d06e083c1b",
"target": {
"function": "jbd2_journal_update_sb_log_tail",
"file": "fs/jbd2/journal.c"
},
"digest": {
"length": 784.0,
"function_hash": "45535171005284367611802563277459358168"
},
"signature_type": "Function"
}
]