CVE-2025-71237: nilfs2: Fix potential block overflow that cause system hang

Published Feb 18, 2026
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

nilfs2: Fix potential block overflow that cause system hang

When a user executes the FITRIM command, an underflow can occur when calculating nblocks if endblock is too small. Since nblocks is of type sectort, which is u64, a negative nblocks value will become a very large positive integer. This ultimately leads to the block layer function blkdevissuediscard() taking an excessively long time to process the bio chain, and the nssegctorsem lock remains held for a long period. This prevents other tasks from acquiring the nssegctorsem lock, resulting in the hang reported by syzbot in [1].

If the ending block is too small, typically if it is smaller than 4KiB range, depending on the usage of the segment 0, it may be possible to attempt a discard request beyond the device size causing the hang.

Exiting successfully and assign the discarded size (0 in this case) to range->len.

Although the start and len values in the user input range are too small, a conservative strategy is adopted here to safely ignore them, which is equivalent to a no-op; it will not perform any trimming and will not throw an error.

[1] task:segctord state:D stack:28968 pid:6093 tgid:6093 ppid:2 taskflags:0x200040 flags:0x00080000 Call Trace: rwbasewritelock+0x3dd/0x750 kernel/locking/rwbasert.c:272 nilfstransactionlock+0x253/0x4c0 fs/nilfs2/segment.c:357 nilfssegctorthreadconstruct fs/nilfs2/segment.c:2569 [inline] nilfssegctorthread+0x6ec/0xe00 fs/nilfs2/segment.c:2684

[ryusuke: corrected part of the commit message about the consequences]

Affected Software

11 affected componentsFixes available
Linux Linux kernel
Microsoft azl3 kernel 6.6.121.1-1
Linux Linux kernel>=3.15<5.10.251
Linux Linux kernel>=5.11<5.15.201
Linux Linux kernel>=5.16<6.1.164
Linux Linux kernel>=6.2<6.6.125
Linux Linux kernel>=6.7<6.12.72
Linux Linux kernel>=6.13<6.18.11
Linux Linux kernel>=6.19<6.19.1
Microsoft cbl2 kernel 5.15.200.1-1
debian/linux
6.1.176-16.1.190-16.12.107-16.12.115-27.2.12-17.2.15-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade debian/linux to a version that resolves this vulnerability.

    Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1

Event History

Feb 18, 2026
CVE Published
via MITRE·02:53 PM
Data Sourced
via MITRE·02:53 PM
Description
Data Sourced
via NVD·04:22 PM
RemedyDescriptionSeverityAffected Software
Feb 21, 2026
Data Sourced
via Microsoft·12:29 PM
DescriptionSeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

1

What is the severity of CVE-2025-71237?

CVE-2025-71237 is classified as a moderate severity vulnerability due to its potential to cause system hangs.

2

How do I fix CVE-2025-71237?

To fix CVE-2025-71237, update to the latest Linux kernel version that includes the patch for this vulnerability.

3

What software is impacted by CVE-2025-71237?

CVE-2025-71237 impacts the Linux kernel, specifically versions that utilize the nilfs2 filesystem.

4

What could happen if CVE-2025-71237 is exploited?

Exploitation of CVE-2025-71237 can lead to a system hang due to block overflow during the execution of the FITRIM command.

5

Is CVE-2025-71237 a remote or local vulnerability?

CVE-2025-71237 is considered a local vulnerability as it requires local access to the system to be exploited.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203