CVE-2025-68337 jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Updates on jbd2 Vulnerabilities CVE-2024-49959 and CVE-2025-68337 Two vulnerabilities in the jbd2 journaling system have been reported. CVE-2024-49959, published on October 21, 2024, addresses an issue where the system waits for space after an error in the cleanup process. CVE-2025-68337, published on December 22, 2025, prevents a bug-on scenario when accessing journal creation in corrupted file systems. 2 sources 41