CVE-2025-37950 ocfs2: fix panic in failed foilio allocation
A local attacker can trigger a kernel panic in the OCFS2 filesystem by causing a failed folio allocation, resulting in a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-37950?
CVE-2025-37950 is a medium-severity vulnerability in Linux kernel, published on 20 May 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
ocfs2: fix panic in failed foilio allocation
commit 7e119cff9d0a ("ocfs2: convert w_pages to w_folios") and commit 9a5e08652dc4b ("ocfs2: use an array of folios instead of an array of pages") save -ENOMEM in the folio array upon allocation failure and call the folio array free code.
The folio array free code expects either valid folio pointers or NULL. Finding the -ENOMEM will result in a panic. Fix by NULLing the error folio entry.
Weakness: CWE-476
Which versions are affected by CVE-2025-37950?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2025-37950?
Apply the vendor's patch.
Is CVE-2025-37950 being exploited?
There is no known exploitation of CVE-2025-37950 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2025-37950, GHSA-pp8c-qfhv-484p, UBUNTU-CVE-2025-37950.