CVE-2026-72225
Description
In the Linux kernel, the following vulnerability has been resolved: jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit() jbd2_journal_initialize_fast_commit() validates journal capacity by checking (journal->j_last - num_fc_blks < JBD2_MIN_JOURNAL_BLOCKS). Both j_last and num_fc_blks are unsigned, so when num_fc_blks exceeds j_last the subtraction wraps to a large value, bypassing the bounds check. The resulting underflow corrupts j_last, j_fc_first, and j_free, leading to journal abort. Fix by checking num_fc_blks against j_last before the subtraction, returning -EFSCORRUPTED.
How to fix
- Linux Linuxaa90f00932bf572d6ef284c977c2a60b39c13bd6, e144ad0250f77e23e28949587b8b57e40dc3b512, 4b48dcb88bb9117e3d3f051175a9a8b7cff7f8b6, fb9b49618ed7296ebfad62a3835da8945f727001, 4450dcaadf7d4aae8b6e4223b5d6ee4eb77097a9, 78955fdce8ff654e6d33a2fa90882a1e7eb26330, a58fc10adf503969fec2007b5afe8987258046c4, 289a2ca0c9b7eae74f93fc213b0b971669b8683d or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 6866d7b3f2bb4f011041ba54c98b1584497fe2fd ≤ v < aa90f00932bf572d6ef284c977c2a60b39c13bd6, 6866d7b3f2bb4f011041ba54c98b1584497fe2fd ≤ v < e144ad0250f77e23e28949587b8b57e40dc3b512, 6866d7b3f2bb4f011041ba54c98b1584497fe2fd ≤ v < 4b48dcb88bb9117e3d3f051175a9a8b7cff7f8b6, 6866d7b3f2bb4f011041ba54c98b1584497fe2fd ≤ v < fb9b49618ed7296ebfad62a3835da8945f727001, 6866d7b3f2bb4f011041ba54c98b1584497fe2fd ≤ v < 4450dcaadf7d4aae8b6e4223b5d6ee4eb77097a9, 6866d7b3f2bb4f011041ba54c98b1584497fe2fd ≤ v < 78955fdce8ff654e6d33a2fa90882a1e7eb26330, 6866d7b3f2bb4f011041ba54c98b1584497fe2fd ≤ v < a58fc10adf503969fec2007b5afe8987258046c4, 6866d7b3f2bb4f011041ba54c98b1584497fe2fd ≤ v < 289a2ca0c9b7eae74f93fc213b0b971669b8683d, 5.10 | aa90f00932bf572d6ef284c977c2a60b39c13bd6, e144ad0250f77e23e28949587b8b57e40dc3b512, 4b48dcb88bb9117e3d3f051175a9a8b7cff7f8b6, fb9b49618ed7296ebfad62a3835da8945f727001, 4450dcaadf7d4aae8b6e4223b5d6ee4eb77097a9, 78955fdce8ff654e6d33a2fa90882a1e7eb26330, a58fc10adf503969fec2007b5afe8987258046c4, 289a2ca0c9b7eae74f93fc213b0b971669b8683d |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.