Critical Vulnerability in Linux Kernel: Journal Handling Flaw in ext4 Filesystem
Summary
DEBIAN-CVE-2025-22113: In the Linux kernel, the following vulnerability has been resolved: ext4: avoid journaling sb update on error if journal is destroying Presently we always BUG_ON if trying to start a transaction on a journal marked with... Affects linux versions < 6.12.48-1. Fixed in 6.12.48-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. It manages system resources and enables communication between hardware and applications. The ext4 filesystem is a widely used file system in Linux, known for its performance and reliability. However, it is susceptible to a critical vulnerability that affects how journal updates are handled during error conditions, potentially leading to system instability.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the ext4 filesystem related to journal handling. Specifically, the issue arises when the system attempts to start a transaction on a journal marked with JBD2_UNMOUNT after the journal has been destroyed. This can occur during certain error handling paths, leading to a situation where the superblock (sb) update is incorrectly journaled, which could compromise data integrity and system stability. The vulnerability was observed during stress tests, indicating that under specific conditions, the system may fail to handle journal updates correctly, potentially resulting in crashes or data loss.
How To Fix
Minimum fixed version
6.12.48-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it is available to mitigate the risk.
Conclusion
The identified vulnerability in the Linux kernel's ext4 filesystem poses significant risks related to journal handling during error conditions. Users are strongly advised to update their systems to the patched versions to ensure data integrity and system stability. Regular monitoring for vulnerabilities using tools like Vulert can help maintain secure software environments.
See every vulnerability recorded for linux →
FAQ
The vulnerability can lead to system crashes or data loss due to improper handling of journal updates in the ext4 filesystem.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Yes, patches are available for Debian 13 (version 6.12.48-1) and Debian 14 (version 6.16.3-1).
While there are no specific workarounds, it is crucial to plan for an update as soon as possible to mitigate risks associated with this vulnerability.
The vulnerability may lead to instability and potential data loss, which can severely impact system performance and reliability.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
