CVE-2025-22120
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
16/04/2025
Last modified:
03/11/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
ext4: goto right label &#39;out_mmap_sem&#39; in ext4_setattr()<br />
<br />
Otherwise, if ext4_inode_attach_jinode() fails, a hung task will<br />
happen because filemap_invalidate_unlock() isn&#39;t called to unlock<br />
mapping->invalidate_lock. Like this:<br />
<br />
EXT4-fs error (device sda) in ext4_setattr:5557: Out of memory<br />
INFO: task fsstress:374 blocked for more than 122 seconds.<br />
Not tainted 6.14.0-rc1-next-20250206-xfstests-dirty #726<br />
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.<br />
task:fsstress state:D stack:0 pid:374 tgid:374 ppid:373<br />
task_flags:0x440140 flags:0x00000000<br />
Call Trace:<br />
<br />
__schedule+0x2c9/0x7f0<br />
schedule+0x27/0xa0<br />
schedule_preempt_disabled+0x15/0x30<br />
rwsem_down_read_slowpath+0x278/0x4c0<br />
down_read+0x59/0xb0<br />
page_cache_ra_unbounded+0x65/0x1b0<br />
filemap_get_pages+0x124/0x3e0<br />
filemap_read+0x114/0x3d0<br />
vfs_read+0x297/0x360<br />
ksys_read+0x6c/0xe0<br />
do_syscall_64+0x4b/0x110<br />
entry_SYSCALL_64_after_hwframe+0x76/0x7e
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.6.70 (including) | 6.6.89 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.12.5 (including) | 6.12.26 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.13 (including) | 6.14.2 (excluding) |
To consult the complete list of CPE names with products and versions, see this page



