CVE-2025-71237

nilfs2: Fix potential block overflow that cause system hang

CVE-2025-71237 is fixed in 58 products on 1 platform, first by DEBIAN-CVE-2025-71237, released February 18, 2026. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
5.5
Moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0014
3rd percentile

In the Linux kernel, the following vulnerability has been resolved: nilfs2: Fix potential block overflow that cause system hang When a user executes the FITRIM command, an underflow can occur when calculating nblocks if end_block is too small. Since nblocks is of type sector_t, which is u64, a negative nblocks value will become a very large positive integer. This ultimately leads to the block layer function __blkdev_issue_discard() taking an excessively long time to process the bio chain, and the ns_segctor_sem lock remains held for a long period. This prevents other tasks from acquiring the ns_segctor_sem lock, resulting in the hang reported by syzbot in [1]. If the ending block is too small, typically if it is smaller than 4KiB range, depending on the usage of the segment 0, it may be possible to attempt a discard request beyond the device size causing the hang. Exiting successfully and assign the discarded size (0 in this case) to range->len. Although the start and len values in the user input range are too small, a conservative strategy is adopted here to safely ignore them, which is equivalent to a no-op; it will not perform any trimming and will not throw an error. [1] task:segctord state:D stack:28968 pid:6093 tgid:6093 ppid:2 task_flags:0x200040 flags:0x00080000 Call Trace: rwbase_write_lock+0x3dd/0x750 kernel/locking/rwbase_rt.c:272 nilfs_transaction_lock+0x253/0x4c0 fs/nilfs2/segment.c:357 nilfs_segctor_thread_construct fs/nilfs2/segment.c:2569 [inline] nilfs_segctor_thread+0x6ec/0xe00 fs/nilfs2/segment.c:2684 [ryusuke: corrected part of the commit message about the consequences]

Where it's fixed

ProductFixed inFixReleased
Linux
bpftool · amzn 2023 1:6.1.164-196.303.amzn2023 ALAS2023-2026-1491 Mar 16, 2026
bpftool-debuginfo · amzn 2023 1:6.1.164-196.303.amzn2023 ALAS2023-2026-1491 Mar 16, 2026
kernel · amzn 2023 1:6.1.164-196.303.amzn2023 ALAS2023-2026-1491 Mar 16, 2026
kernel-debuginfo · amzn 2023 1:6.1.164-196.303.amzn2023 ALAS2023-2026-1491 Mar 16, 2026
kernel-debuginfo-common-aarch64 · amzn 2023 1:6.1.164-196.303.amzn2023 ALAS2023-2026-1491 Mar 16, 2026
kernel-debuginfo-common-x86_64 · amzn 2023 1:6.1.164-196.303.amzn2023 ALAS2023-2026-1491 Mar 16, 2026
kernel-devel · amzn 2023 1:6.1.164-196.303.amzn2023 ALAS2023-2026-1491 Mar 16, 2026
kernel-headers · amzn 2023 1:6.1.164-196.303.amzn2023 ALAS2023-2026-1491 Mar 16, 2026
kernel-libbpf · amzn 2023 1:6.1.164-196.303.amzn2023 ALAS2023-2026-1491 Mar 16, 2026
kernel-libbpf-debuginfo · amzn 2023 1:6.1.164-196.303.amzn2023 ALAS2023-2026-1491 Mar 16, 2026
kernel-libbpf-devel · amzn 2023 1:6.1.164-196.303.amzn2023 ALAS2023-2026-1491 Mar 16, 2026
kernel-libbpf-static · amzn 2023 1:6.1.164-196.303.amzn2023 ALAS2023-2026-1491 Mar 16, 2026
kernel-livepatch-6.1.164-196.303 · amzn 2023 1:1.0-0.amzn2023 ALAS2023-2026-1491 Mar 16, 2026
kernel-modules-extra · amzn 2023 1:6.1.164-196.303.amzn2023 ALAS2023-2026-1491 Mar 16, 2026
kernel-modules-extra-common · amzn 2023 1:6.1.164-196.303.amzn2023 ALAS2023-2026-1491 Mar 16, 2026
kernel-tools · amzn 2023 1:6.1.164-196.303.amzn2023 ALAS2023-2026-1491 Mar 16, 2026
kernel-tools-debuginfo · amzn 2023 1:6.1.164-196.303.amzn2023 ALAS2023-2026-1491 Mar 16, 2026
kernel-tools-devel · amzn 2023 1:6.1.164-196.303.amzn2023 ALAS2023-2026-1491 Mar 16, 2026
kernel-uek · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-core · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-core · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-core · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-core · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-devel · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-devel · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-modules · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-modules · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-modules-core · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-modules-core · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-modules-deprecated · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-modules-deprecated · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-modules-desktop · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-modules-desktop · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-modules-extra · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-modules-extra · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-modules-extra-netfilter · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-modules-extra-netfilter · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-modules-usb · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-modules-usb · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-modules-wireless · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-modules-wireless · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-devel · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-devel · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-doc · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-doc · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-modules · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-modules · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-modules-core · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-modules-core · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-modules-deprecated · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-modules-deprecated · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-modules-desktop · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-modules-desktop · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-modules-extra · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-modules-extra · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-modules-extra-netfilter · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-modules-extra-netfilter · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-modules-usb · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-modules-usb · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-modules-wireless · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-modules-wireless · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-tools · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-tools · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-core · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-core · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-devel · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-devel · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-modules · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-modules · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-modules-core · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-modules-core · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-modules-deprecated · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-modules-deprecated · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-modules-desktop · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-modules-desktop · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-modules-extra · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-modules-extra · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-modules-extra-netfilter · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-modules-extra-netfilter · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-modules-usb · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-modules-usb · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-modules-wireless · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-modules-wireless · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
linux · Debian 12.15 (bookworm) 6.1.164-1 DEBIAN-CVE-2025-71237 Feb 18, 2026
linux · Debian 13.5 (trixie) 6.12.73-1 DEBIAN-CVE-2025-71237 Feb 18, 2026
linux · Debian 14 6.18.12-1 DEBIAN-CVE-2025-71237 Feb 18, 2026
perf · amzn 2023 1:6.1.164-196.303.amzn2023 ALAS2023-2026-1491 Mar 16, 2026
perf-debuginfo · amzn 2023 1:6.1.164-196.303.amzn2023 ALAS2023-2026-1491 Mar 16, 2026
python3-perf · amzn 2023 1:6.1.164-196.303.amzn2023 ALAS2023-2026-1491 Mar 16, 2026
python3-perf-debuginfo · amzn 2023 1:6.1.164-196.303.amzn2023 ALAS2023-2026-1491 Mar 16, 2026

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.