Junglewise Threat Intelligence

CVE-2025-68337: Linux Kernel denial of service in JBD2 journal access

CVE-2025-68337 · Severity: info · CVSS 5.5 · Published 2025-12-22

Technologies: Linux Kernel, Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP. Vendors: Linux, Siemens.

Executive brief

A vulnerability in the Linux kernel's journaling system (jbd2) can cause the entire operating system to crash when encountering a corrupted file system. This occurs because the system uses a 'panic' response (BUG_ON) when it detects certain data inconsistencies, rather than handling the error gracefully. An attacker or a failing storage device could trigger this crash, leading to a complete denial of service for the affected machine.

Technical details

A vulnerability exists in the jbd2_journal_get_create_access() function within fs/jbd2/transaction.c of the Linux kernel. The root cause is the use of J_ASSERT() (which triggers BUG_ON) to validate buffer head states that may be inconsistent due to external file system corruption or storage failures. Specifically, if a block being committed is prematurely reallocated due to a corrupted block bitmap, the assertion fails. An attacker with the ability to mount a specially crafted corrupted file system image or trigger specific disk inconsistencies can cause a kernel panic. The fix replaces the immediate BUG_ON with a JBD2 abort mechanism (returning -EROFS), allowing the system to handle the error without crashing.

Affected products

  • Linux Linux Kernel 6.18.0-rc1-next
  • Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP V3.1.6

Timeline

  • 2025-10-25: disclosed: Initial patch submission by Ye Bin
  • 2025-11-26: patched: Commited to mainline kernel tree
  • 2025-12-22: advisory: CVE-2025-68337 published

References

Related threats