CVE-2026-72225

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-72225
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72225.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-72225
Downstream
Published
2026-08-15T05:54:17Z
Modified
2026-08-25T03:51:27Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit()
Details

In the Linux kernel, the following vulnerability has been resolved:

jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit()

jbd2_journal_initialize_fast_commit() validates journal capacity by checking (journal->j_last - num_fc_blks < JBD2_MIN_JOURNAL_BLOCKS). Both j_last and num_fc_blks are unsigned, so when num_fc_blks exceeds j_last the subtraction wraps to a large value, bypassing the bounds check.

The resulting underflow corrupts j_last, j_fc_first, and j_free, leading to journal abort.

Fix by checking num_fc_blks against j_last before the subtraction, returning -EFSCORRUPTED.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72225.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6866d7b3f2bb4f011041ba54c98b1584497fe2fd
Fixed
aa90f00932bf572d6ef284c977c2a60b39c13bd6
Fixed
e144ad0250f77e23e28949587b8b57e40dc3b512
Fixed
4b48dcb88bb9117e3d3f051175a9a8b7cff7f8b6
Fixed
fb9b49618ed7296ebfad62a3835da8945f727001
Fixed
4450dcaadf7d4aae8b6e4223b5d6ee4eb77097a9
Fixed
78955fdce8ff654e6d33a2fa90882a1e7eb26330
Fixed
a58fc10adf503969fec2007b5afe8987258046c4
Fixed
289a2ca0c9b7eae74f93fc213b0b971669b8683d

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72225.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.10.0
Fixed
5.10.266
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.212
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.178
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.145
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.97
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.40
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72225.json"