ThreatCluster

Updates on jbd2 Vulnerabilities CVE-2024-49959 and CVE-2025-68337

First seen 21 Feb 2026, 04:19 UTC Api.Msrc.Microsoft 41

Article Content

Browse articles
ThreatCluster

Two vulnerabilities in the jbd2 journaling system have been reported. CVE-2024-49959, published on October 21, 2024, addresses an issue where the system waits for space after an error in the cleanup process. CVE-2025-68337, published on December 22, 2025, prevents a bug-on scenario when accessing journal creation in corrupted file systems.

Timeline

2024-10-21
CVE-2024-49959 published
2025-12-22
CVE-2025-68337 published
2026-02-18
Article on CVE-2025-68337 published
2026-02-21
Article on CVE-2024-49959 published