GFS2 Inode Address Space Management Vulnerability in Linux Kernel
CVE-2025-21699

5.5MEDIUM

Key Information:

Vendor

Linux
Status
Linux
Vendor
CVE Published:
12 February 2025

What is CVE-2025-21699?

A vulnerability exists in the Linux kernel related to the GFS2 file system's handling of inode address space when the GFS2_DIF_JDATA flag is toggled. This issue arises from the improper management of inode states, where the kernel may erroneously mix buffer heads with iomap_folio_state structures. Such a flaw could lead to inconsistencies in the inode's address space management, potentially causing data corruption or system instability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Linux 2164f9b9186962ffb7c687e18ec6f5255525f09d < 8c41abc11aa8438c9ed2d973f97e66674c0355df

Linux 2164f9b9186962ffb7c687e18ec6f5255525f09d < 4e3ded34f3f3c9d7ed2aac7be8cf51153646574a

Linux 2164f9b9186962ffb7c687e18ec6f5255525f09d < 2a40a140e11fec699e128170ccaa98b6b82cb503

References

https://git.kernel.org/stable/c/8c41abc11aa8438c9ed2d973f...
https://git.kernel.org/stable/c/4e3ded34f3f3c9d7ed2aac7be...
https://git.kernel.org/stable/c/2a40a140e11fec699e128170c...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.