CVE-2025-68337

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.18.0-rc1-next

Description The Linux kernel contains an issue within the jbd2 journaling system. A bug can occur in the jbd2 journal get create access() function when the file system is corrupted. Specifically, the issue arises when inconsistencies exist in file system data, such as a referenced block not having its bitmap set, potentially leading to a block being allocated and reused. This can trigger a system crash due to an invalid opcode. The problem occurs in scenarios with storage failures and errors=continue mode. The code previously used J ASSERT(), which is not reliable in abnormal situations, and has been updated to trigger a JBD abort instead.

Recommendations Update to a version newer than 6.18.0-rc1-next.