PT-2026-20445 · Linux+2 · Linux Kernel+2

CVE-2025-71237

·

Published

2025-01-01

·

Updated

2026-08-25

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains a flaw within the nilfs2 file system related to handling the FITRIM command. A block overflow can occur during the calculation of nblocks if the end block value is too small, potentially leading to a system hang. Specifically, a negative nblocks value can result in a large positive integer, causing the blkdev issue discard() function to process a bio chain for an extended duration. This prolonged processing time can block other tasks from acquiring the ns segctor sem lock, resulting in a system hang. The issue may arise when attempting a discard request beyond the device size, particularly with small ending block values (e.g., less than 4KiB). The current implementation safely ignores excessively small start and length values, effectively performing a no-op to prevent trimming and avoid errors.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Resource Exhaustion

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-11523
CVE-2025-71237
ECHO-8DDD-5733-0005
OESA-2026-3155
OPENSUSE-SU-2026:10387-1
USN-8492-1
USN-8492-2
USN-8492-3
USN-8492-4
USN-8492-5
USN-8497-1
USN-8498-1
USN-8499-1
USN-8575-1
USN-8575-2
USN-8575-3
USN-8576-1
USN-8576-2
USN-8597-1
USN-8606-1
USN-8607-1
USN-8609-1
USN-8610-1
USN-8619-1
USN-8620-1
USN-8620-2
USN-8620-3
USN-8620-4
USN-8668-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu