CVE-2025-22113

17

FAUCET Score

CVE-2025-22113 describes a vulnerability in the Linux kernel's ext4 filesystem, specifically related to journal handling during unmounting. The issue could lead to a BUG_ON condition when an update to the superblock attempts to start a transaction after the journal has been destroyed, potentially causing a system crash. Rated Medium (CVSS 5.5), this local vulnerability requires low privileges and complexity, primarily impacting system availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		>= 5.11.1, < 6.12.46CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::
		>= 6.13, < 6.14.2CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::
		5.11CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel:5.11:-::::::
		5.11CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel:5.11:rc4::::::
		5.11CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel:5.11:rc5::::::

CVSS Data

CVSS version used by this source: 3.1

5.5MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

Exploitability Score

1.8

Impact Score

3.6

CvssVersion

3.1

Exploit Intelligence

EPSS Score

0.19%

Probability of exploitation in next 30 days

EPSS Percentile

8.8%

Percentile rank of EPSS score among Peer Group

As of 2026-07-28

Model: v2026.06.15

This CVE's current EPSS score of 0.0019 is in the 44th percentile among its peer group of 15,940 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (36)

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 10Fixed in: kernel-0:6.12.0-55.25.1.el10_0

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: kernel-0:5.14.0-570.30.1.el9_6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsFixed in: kernel-0:5.14.0-70.140.1.el9_0

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsFixed in: kernel-rt-0:5.14.0-70.140.1.rt21.212.el9_0

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsFixed in: kernel-0:5.14.0-284.128.1.el9_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsFixed in: kernel-rt-0:5.14.0-284.128.1.rt14.413.el9_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: kernel-0:5.14.0-427.79.1.el9_4

ubuntupatch availablevia ubuntu_usn

Product: linux-gcp-6.8 (jammy)Fixed in: 6.8.0-1052.55~22.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-hwe-6.8 (jammy)Fixed in: 6.8.0-106.106~22.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-ibm-6.8 (jammy)Fixed in: 6.8.0-1049.49~22.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-lowlatency-hwe-6.8 (jammy)Fixed in: 6.8.0-106.106.1~22.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-oracle-6.8 (jammy)Fixed in: 6.8.0-1047.48~22.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux (noble)Fixed in: 6.8.0-106.106

ubuntupatch availablevia ubuntu_usn

Product: linux-aws (noble)Fixed in: 6.8.0-1050.53

ubuntupatch availablevia ubuntu_usn

Product: linux-gcp (noble)Fixed in: 6.8.0-1052.55

ubuntupatch availablevia ubuntu_usn

Product: linux-gke (noble)Fixed in: 6.8.0-1048.53

ubuntupatch availablevia ubuntu_usn

Product: linux-gkeop (noble)Fixed in: 6.8.0-1035.38

ubuntupatch availablevia ubuntu_usn

Product: linux-ibm (noble)Fixed in: 6.8.0-1049.49

ubuntupatch availablevia ubuntu_usn

Product: linux-lowlatency (noble)Fixed in: 6.8.0-106.106.1

ubuntupatch availablevia ubuntu_usn

Product: linux-oracle (noble)Fixed in: 6.8.0-1047.48

ubuntupatch availablevia ubuntu_usn

Product: linux-realtime-6.8 (jammy)Fixed in: 6.8.1-1045.46~22.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-realtime (noble)Fixed in: 6.8.1-1045.46

ubuntupatch availablevia ubuntu_usn

Product: linux-aws-6.8 (jammy)Fixed in: 6.8.0-1050.53~22.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-azure-6.8 (jammy)Fixed in: 6.8.0-1051.57~22.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-azure (noble)Fixed in: 6.8.0-1051.57

ubuntupatch availablevia ubuntu_usn

Product: linux-xilinx (noble)Fixed in: 6.8.0-1029.30

ubuntupatch availablevia ubuntu_usn

Product: linux-raspi (noble)Fixed in: 6.8.0-1050.54

ubuntupatch availablevia ubuntu_usn

Product: linux-raspi-realtime (noble)Fixed in: 6.8.0-2040.41

ubuntupatch availablevia ubuntu_usn

Product: linux-azure-fips (noble)Fixed in: 6.8.0-1052.58+fips1

ubuntupatch availablevia ubuntu_usn

Product: linux-aws-fips (noble)Fixed in: 6.8.0-1050.53+fips1

ubuntupatch availablevia ubuntu_usn

Product: linux-fips (noble)Fixed in: 6.8.0-106.106+fips1

ubuntupatch availablevia ubuntu_usn

Product: linux-gcp-fips (noble)Fixed in: 6.8.0-1052.55+fips1

ubuntupatch availablevia ubuntu_usn

Product: linux-nvidia-6.8 (jammy)Fixed in: 6.8.0-1049.52~22.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-nvidia (noble)Fixed in: 6.8.0-1049.52

ubuntupatch availablevia ubuntu_usn

Product: linux-nvidia-lowlatency (noble)Fixed in: 6.8.0-1049.52.1

redhatno patchvia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: kernel-rt

Vendor Advisories (12)

ubuntuUSN-8261-1

Linux kernel (Xilinx) vulnerabilities

ubuntuUSN-8165-1

Linux kernel (Azure FIPS) vulnerabilities

ubuntuUSN-8095-5

Linux kernel (Raspberry Pi) vulnerabilities

ubuntuUSN-8126-1

Linux kernel (Azure) vulnerabilities

ubuntuUSN-8125-1

Linux kernel (Azure) vulnerabilities

ubuntuUSN-8095-4

Linux kernel (AWS) vulnerabilities

ubuntuUSN-8095-3

Linux kernel (Real-time) vulnerabilities

ubuntuUSN-8095-2

Linux kernel (FIPS) vulnerabilities

ubuntuUSN-8100-1

Linux kernel (NVIDIA) vulnerabilities

ubuntuUSN-8095-1

Linux kernel vulnerabilities

redhatCVE-2025-22113Moderate

kernel: ext4: avoid journaling sb update on error if journal is destroying

microsoft2025-Apr/CVE-2025-22113

ext4: avoid journaling sb update on error if journal is destroying

References

git.kernel.org / stable/c/ce2f26e73783b4a7c46a86e3af5b5c8de0971790

Patch

git.kernel.org / stable/c/db05767b5bc307143d99fe2afd8c43af58d2ebef

Patch

git.kernel.org / stable/c/eddca44ddf810e27f0c96913aa3cc92ebd679ddb

Patch