PT-2025-27995 · Linux+5 · Linux Kernel+5
Published
2025-07-04
·
Updated
2026-04-20
·
CVE-2025-38220
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
A vulnerability in the Linux kernel has been identified, which can cause a kernel NULL pointer dereference when processing a symlink inode from the orphan list. This issue arises due to the partial block zeroing code in the truncate path calling
ext4 dirty journalled data() and subsequently folio mark dirty(), but symlink inodes are not assigned an a ops vector in ext4. The vulnerability can be triggered by fstest generic/388, which occasionally reproduces a crash.Recommendations:
To resolve this issue, update the
ext4 dirty journalled data() helper to only mark the folio dirty on regular files, for which a ops is assigned. This change aligns with the journaling logic in the ext4 symlink() creation path.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu