CVE-2025-37950: ocfs2: fix panic in failed foilio allocation
In the Linux kernel, the following vulnerability has been resolved:
ocfs2: fix panic in failed foilio allocation
commit 7e119cff9d0a ("ocfs2: convert wpages to wfolios") and commit 9a5e08652dc4b ("ocfs2: use an array of folios instead of an array of pages") save -ENOMEM in the folio array upon allocation failure and call the folio array free code.
The folio array free code expects either valid folio pointers or NULL. Finding the -ENOMEM will result in a panic. Fix by NULLing the error folio entry.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch 9a5e08652dc4b
Event History
Frequently Asked Questions
What is the severity of CVE-2025-37950?
CVE-2025-37950 has been classified as having a high severity due to the potential for system crashes.
How do I fix CVE-2025-37950?
To fix CVE-2025-37950, you should update your Linux kernel to the latest version where the vulnerability has been patched.
Which versions of the Linux kernel are affected by CVE-2025-37950?
CVE-2025-37950 affects specific versions of the Linux kernel prior to the security patch being applied.
What is the impact of CVE-2025-37950?
The impact of CVE-2025-37950 can lead to system panic during foilio allocation failure, causing instability.
Is CVE-2025-37950 publicly known?
Yes, CVE-2025-37950 is a publicly known vulnerability that has been documented and reported.