CVE-2025-22120

ext4: goto right label 'out_mmap_sem' in ext4_setattr()

MEDIUM
5.5
CVSS Score
Published: April 16, 2025 at 02:13 PM UTC
Updated: June 17, 2026 at 08:45 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: ext4: goto right label 'out_mmap_sem' in ext4_setattr() Otherwise, if ext4_inode_attach_jinode() fails, a hung task will happen because filemap_invalidate_unlock() isn't called to unlock mapping->invalidate_lock. Like this: EXT4-fs error (device sda) in ext4_setattr:5557: Out of memory INFO: task fsstress:374 blocked for more than 122 seconds. Not tainted 6.14.0-rc1-next-20250206-xfstests-dirty #726 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:fsstress state:D stack:0 pid:374 tgid:374 ppid:373 task_flags:0x440140 flags:0x00000000 Call Trace: <TASK> __schedule+0x2c9/0x7f0 schedule+0x27/0xa0 schedule_preempt_disabled+0x15/0x30 rwsem_down_read_slowpath+0x278/0x4c0 down_read+0x59/0xb0 page_cache_ra_unbounded+0x65/0x1b0 filemap_get_pages+0x124/0x3e0 filemap_read+0x114/0x3d0 vfs_read+0x297/0x360 ksys_read+0x6c/0xe0 do_syscall_64+0x4b/0x110 entry_SYSCALL_64_after_hwframe+0x76/0x7e

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

6.12.5 ≤ v < 6.12.266.13 ≤ v < 6.14.26.13 ≤ v < 6.156.6.70 ≤ v < 6.6.896.12.56.136.6.7093011887013dbaa0e3a0285176ca89be153df651b6ce2dbe984bcd7fb0c1df15b5e2fa57e1574a8ec7fc0366c65628fd69bfc310affec4918199aae2
Vendor states this is fixed in 32d872e3905746ff1048078256cb00f946b97d8a (fixed)
Vendor states this is fixed in 45314999f950321a341033ae8f9ac12dce40669b (fixed)
Vendor states this is fixed in 551667f99bcf04fa58594d7d19aef73c861a1200 (fixed)
Vendor states this is fixed in 7e91ae31e2d264155dfd102101afc2de7bd74a64 (fixed)
Vendor states this is fixed in 6.12.26 (unaffected)
Vendor states this is fixed in 6.13 (unaffected)
Vendor states this is fixed in 6.14.2 (unaffected)
Vendor states this is fixed in 6.15 (unaffected)
Vendor states this is fixed in 6.6.89 (unaffected)

References (4)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/32d872e3905746ff1048078256cb00f946b97d8a
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/45314999f950321a341033ae8f9ac12dce40669b
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/551667f99bcf04fa58594d7d19aef73c861a1200
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/7e91ae31e2d264155dfd102101afc2de7bd74a64

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card