In the Linux kernel, the following vulnerability has been resolved:
ocfs2: prevent release journal inode after journal shutdown
Before calling ocfs2deleteosb(), ocfs2journalshutdown() has already been executed in ocfs2dismountvolume(), so osb->journal must be NULL. Therefore, the following calltrace will inevitably fail when it reaches jbd2journalreleasejbdinode().
ocfs2dismountvolume()-> ocfs2deleteosb()-> ocfs2freeslotinfo()-> _ocfs2freeslotinfo()-> evict()-> ocfs2evictinode()-> ocfs2clearinode()-> jbd2journalreleasejbdinode(osb->journal->jjournal,
Adding osb->journal checks will prevent null-ptr-deref during the above execution path.
[
{
"target": {
"function": "ocfs2_clear_inode",
"file": "fs/ocfs2/inode.c"
},
"digest": {
"length": 2257.0,
"function_hash": "224987983871917271622834909964333049308"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f4a917e6cd6c798f7adf39907f117fc754db1283",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2025-39842-64d758b0"
},
{
"target": {
"function": "ocfs2_clear_inode",
"file": "fs/ocfs2/inode.c"
},
"digest": {
"length": 2257.0,
"function_hash": "224987983871917271622834909964333049308"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@42c415c53ad2065088cc411d08925effa5b3d255",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2025-39842-65af5d20"
},
{
"target": {
"file": "fs/ocfs2/inode.c"
},
"digest": {
"line_hashes": [
"161890204026058726937018117857517262816",
"146139060562155805491026516546718848754",
"265289373173929928526397929730114252369"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f4a917e6cd6c798f7adf39907f117fc754db1283",
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2025-39842-aa0c4890"
},
{
"target": {
"file": "fs/ocfs2/inode.c"
},
"digest": {
"line_hashes": [
"161890204026058726937018117857517262816",
"146139060562155805491026516546718848754",
"265289373173929928526397929730114252369"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@42c415c53ad2065088cc411d08925effa5b3d255",
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2025-39842-cf9609df"
}
]