In the Linux kernel, the following vulnerability has been resolved:
ocfs2: prevent release journal inode after journal shutdown
Before calling ocfs2deleteosb(), ocfs2journalshutdown() has already been executed in ocfs2dismountvolume(), so osb->journal must be NULL. Therefore, the following calltrace will inevitably fail when it reaches jbd2journalreleasejbdinode().
ocfs2dismountvolume()-> ocfs2deleteosb()-> ocfs2freeslotinfo()-> _ocfs2freeslotinfo()-> evict()-> ocfs2evictinode()-> ocfs2clearinode()-> jbd2journalreleasejbdinode(osb->journal->jjournal,
Adding osb->journal checks will prevent null-ptr-deref during the above execution path.
[
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e9188f66e94955431ddbe2cd1cdf8ff2bb486abf",
"deprecated": false,
"id": "CVE-2025-39842-1109dbb4",
"target": {
"function": "ocfs2_clear_inode",
"file": "fs/ocfs2/inode.c"
},
"digest": {
"function_hash": "224987983871917271622834909964333049308",
"length": 2257.0
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e9188f66e94955431ddbe2cd1cdf8ff2bb486abf",
"deprecated": false,
"id": "CVE-2025-39842-5e77fee1",
"target": {
"file": "fs/ocfs2/inode.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"161890204026058726937018117857517262816",
"146139060562155805491026516546718848754",
"265289373173929928526397929730114252369"
]
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f4a917e6cd6c798f7adf39907f117fc754db1283",
"deprecated": false,
"id": "CVE-2025-39842-64d758b0",
"target": {
"function": "ocfs2_clear_inode",
"file": "fs/ocfs2/inode.c"
},
"digest": {
"function_hash": "224987983871917271622834909964333049308",
"length": 2257.0
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f4a917e6cd6c798f7adf39907f117fc754db1283",
"deprecated": false,
"id": "CVE-2025-39842-aa0c4890",
"target": {
"file": "fs/ocfs2/inode.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"161890204026058726937018117857517262816",
"146139060562155805491026516546718848754",
"265289373173929928526397929730114252369"
]
},
"signature_type": "Line"
}
]