PT-2026-20445 · Linux · Linux Kernel

Published 2025-01-01 · Updated 2026-04-20 · CVE-2025-71237

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the nilfs2 file system related to handling the FITRIM command. A block overflow can occur during the calculation of nblocks if the end block value is too small, potentially leading to a system hang. Specifically, a negative nblocks value can result in a large positive integer, causing the blkdev issue discard() function to process a bio chain for an extended duration. This prolonged processing time can block other tasks from acquiring the ns segctor sem lock, resulting in a system hang. The issue may arise when attempting a discard request beyond the device size, particularly with small ending block values (e.g., less than 4KiB). The current implementation safely ignores excessively small start and length values, effectively performing a no-op to prevent trimming and avoid errors.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2025-71237

ECHO-8DDD-5733-0005

OPENSUSE-SU-2026:10387-1

Affected Products

Linux Kernel

References · 55

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71237.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2025-71237 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-71237 · Vendor Advisory
• https://git.kernel.org/stable/c/ed527ef0c264e4bed6c7b2a158ddf516b17f5f66 · Patch
• https://git.kernel.org/stable/c/b8c5ee234bd54f1447c846101fdaef2cf70c2149 · Patch
• https://git.kernel.org/stable/c/ba18e5f22f26aa4ef78bc3e81f639d1d4f3845e6 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2026:10387-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2026-50160.html · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2025-71237 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71237 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-71237 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2025-71237 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2025-71237 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-71237 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2025-71237 · Vendor Advisory