PT-2025-39125 · Xfs+4 · Xfs+4

Published 2025-09-10 · Updated 2025-09-23 · CVE-2025-39868

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.16.0+ #6

Description The Linux kernel contained an issue where a runtime warning occurred in the truncate folio batch exceptionals() function. This was due to a missing fix in erofs following a commit that addressed similar issues in xfs and ext4. The issue manifested as a warning during filesystem unmount operations, potentially indicating incomplete DAX entry removal. The warning was observed during the unmount process, specifically within the truncate inode pages range, truncate inode pages final, evict, dispose list, evict inodes, generic shutdown super, kill block super, and erofs kill sb functions.

Recommendations Update to a version newer than 6.16.0+ #6.

Exploit

Fix

Improper Locking

Infinite Loop

Weakness Enumeration

CWE-667

CWE-835

Related Identifiers

BDU:2025-13890

CVE-2025-39868

Affected Products

Astra Linux

Linux Kernel

Erofs

Ext4

Xfs

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39868.json · Exploit
• https://git.kernel.org/stable/c/91c34cd6ca1bc67ccf2d104834956af56b5893de · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-39868 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-39868 · Vendor Advisory
• https://git.kernel.org/stable/c/181993bb0d626cf88cc803f4356ce5c5abe86278 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-39868 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-39868 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-39868 · Security Note
• https://ubuntu.com/security/CVE-2025-39868 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-39868 · Security Note
• https://bdu.fstec.ru/vul/2025-13890 · Security Note
• https://cybersecurity-help.cz/vdb/SB2025092384 · Note
• https://twitter.com/VulmonFeeds/status/1970557231239135545 · Twitter Post
• https://twitter.com/CVEnew/status/1970393444372656141 · Twitter Post
• https://vuldb.com/?id.325578 · Note