Linux Kernel Vulnerability in Ceph Component Affects System Stability

CVE-2025-39878

What is CVE-2025-39878?

A flaw in the Linux kernel's Ceph component could allow silent failure to handle errors properly. The issue lies in the new function introduced during code refactoring, which inadvertently returns a success code (0) even when an error occurs. This leads to potential instability as NULL entries remain in the page array, ultimately risking kernel crashes. The problem can be mitigated by adjusting the return order to ensure proper error reporting instead of defaulting to success.

References