CVE-2025-37839

unknown

EUVD alias: EUVD-2025-14153

Published 2026-10-07 · Modified —

Discuss on Community Propose mitigation

CVSS v3

—

CVSS v4 NEW

—

not yet in upstream

VIR risk

—

Description

Kernel Live Patch Security Notice

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

Mitigation details

Source: Debian Security Tracker · View original ↗ · DFSG

CVE-2025-37839 NameCVE-2025-37839 DescriptionIn the Linux kernel, the following vulnerability has been resolved: jbd2: remove wrong sb->s_sequence check Journal emptiness is not determined by sb->s_sequence == 0 but rather by sb->s_start == 0 (which is set a few lines above). Furthermore 0 is a valid transaction ID so the check can spuriously trigger. Remove the invalid WARN_ON. SourceCVE (at…

CVE-2025-37839

Name	CVE-2025-37839
Description	In the Linux kernel, the following vulnerability has been resolved: jbd2: remove wrong sb->s_sequence check Journal emptiness is not determined by sb->s_sequence == 0 but rather by sb->s_start == 0 (which is set a few lines above). Furthermore 0 is a valid transaction ID so the check can spuriously trigger. Remove the invalid WARN_ON.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-4178-1, DLA-4193-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
linux (PTS)	bookworm	6.1.176-1	fixed
	bookworm (security)	6.1.187-1	fixed
	trixie	6.12.107-1	fixed
	trixie (security)	6.12.111-1	fixed
	forky	7.2.8-1	fixed
	sid	7.2.9-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin
linux	source	bullseye	5.10.237-1	DLA-4178-1
linux	source	bookworm	6.1.135-1
linux	source	(unstable)	6.12.25-1
linux-6.1	source	bullseye	6.1.137-1~deb11u1	DLA-4193-1

Notes

https://git.kernel.org/linus/e6eff39dd0fe4190c6146069cc16d160e71d1148 (6.15-rc1)

Home - Debian Security - Source (Git)

Apply commands

text fix

Notes

https://git.kernel.org/linus/e6eff39dd0fe4190c6146069cc16d160e71d1148 (6.15-rc1)

OS impact

SUSE Affected 1 release

Version	Status	Fixed in
—	Affected	—

Debian Fixed 5 releases

Version	Status	Fixed in
trixie	Fixed	`6.12.25-1`
sid	Fixed	`6.12.25-1`
forky	Fixed	`6.12.25-1`
bullseye	Fixed	`5.10.237-1`
bookworm	Fixed	`6.1.135-1`

Ubuntu Fixed 6 releases

Version	Status	Fixed in
xenial	Fixed	`122.1`
resolute	Fixed	`122.1`
noble	Fixed	`122.1`
jammy	Fixed	`122.4`
focal	Fixed	`122.1`
bionic	Fixed	`122.1`

References

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.