Critical Journal Handling Vulnerability in Linux Kernel - CVE-2025-22113
Summary
CVE-2025-22113: In the Linux kernel, the following vulnerability has been resolved: ext4: avoid journaling sb update on error if journal is destroying Presently we always BUG_ON if trying to start a transaction on a journal marked with... Affects linux versions 6.1.106-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, managing hardware and system resources. It provides essential services for all other software running on the system. The ext4 filesystem is a widely used file system in Linux, known for its performance and reliability. However, it has been found to have a vulnerability that can lead to improper handling of journal updates during specific error conditions.
Vulnerability Detail
In the Linux kernel, specifically within the ext4 filesystem, a vulnerability has been identified where the system may attempt to start a transaction on a journal that is marked as destroyed. This can occur during error handling paths, particularly when the filesystem is being unmounted. The sequence of operations can lead to a situation where the superblock (sb) is updated in a journaled manner even after the journal has been marked for destruction, potentially leading to data corruption or system instability. The vulnerability arises from the improper management of journal flags during the shutdown process, which can be exploited under certain stress testing conditions.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can avoid triggering the vulnerability by ensuring that the filesystem is not subjected to stress tests or abrupt unmounting during critical operations. Additionally, users can monitor the journal flags and avoid operations that may lead to the journal being marked as destroyed.
Conclusion
CVE-2025-22113 represents a significant vulnerability in the Linux kernel's ext4 filesystem, with the potential for serious consequences if not addressed. Users are strongly encouraged to update their systems to the latest patched version to ensure protection against this issue. Additionally, utilizing tools like Vulert can help in monitoring for such vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
CVE-2025-22113 is a vulnerability in the Linux kernel's ext4 filesystem that can lead to improper journal handling, potentially causing data corruption.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected by this vulnerability.
The risks include potential data corruption, system instability, and unexpected behavior during filesystem operations, especially under stress conditions.
Yes, a patch has been released for the Linux kernel to address CVE-2025-22113. Users should update to the latest version of the kernel.
If an immediate update is not possible, avoid stress testing the filesystem and ensure proper unmounting procedures are followed to mitigate the risk.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
