CVE-2025-68364
Kernel Panic Prevention in OCFS2 via Relaxed BUG() Handling
Publication date: 2025-12-24
Last updated on: 2025-12-24
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| oracle | ocfs2 | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is related to the Linux kernel's ocfs2 filesystem. Specifically, in the function __ocfs2_move_extent(), the code previously used a BUG() call which would cause the entire kernel to crash if filesystem corruption was detected. The vulnerability has been addressed by changing this behavior to use ocfs2_error() instead, which prevents the whole kernel from crashing due to this issue.
How can this vulnerability impact me? :
If unpatched, this vulnerability could cause the entire Linux kernel to crash when filesystem corruption occurs in ocfs2, leading to system downtime and potential data loss. By relaxing the BUG() call to ocfs2_error(), the system avoids crashing, improving stability even in the presence of filesystem corruption.