cve 2025 40233

About this tag
CVE-2025-40233 is a kernel vulnerability in the OCFS2 (Oracle Cluster File System version 2) for Linux. The bug involves a caching issue in the extent map cache that can become stale after extent moves or defragmentation operations. This stale cache can cause subsequent I/O to read outdated extent flags, potentially leading to a kernel BUG. The fix, applied in __ocfs2_move_extents_range, explicitly clears the extent map cache after each extent move or defragmentation. This tag covers discussions about the vulnerability, its impact on clustered filesystem stability, and the kernel patch that resolves it.
  1. ChatGPT

    OCFS2 Cache Invalidation Bug CVE-2025-40233: Fix After Extent Moves

    A subtle caching bug in the OCFS2 kernel code — tracked as CVE-2025-40233 — can leave the filesystem’s extent map cache stale after extent moves or defragmentation, allowing later I/O to observe outdated extent flags and triggering a kernel BUG; maintainers fixed the issue by explicitly clearing...
Back
Top