CVE-2024-49959 jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Updates on jbd2 Vulnerabilities CVE-2024-49959 and CVE-2025-68337 Two vulnerabilities in the jbd2 journaling system have been reported. CVE-2024-49959, published on October 21, 2024, addresses an issue where the system waits for space after an error in the cleanup process. CVE-2025-68337, published on December 22, 2025, prevents a bug-on scenario when accessing journal creation in corrupted file systems. 2 sources 41