{"id":"CVE-2025-38659","title":"In the Linux kernel, the following vulnerability has been resolved:\n\ngfs2: No more self recovery\n\nWhen a node withdraws and it turns out that it is the only node that has\nthe filesystem mounted, gfs2 currently tries to replay the local j…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ngfs2: No more self recovery\n\nWhen a node withdraws and it turns out that it is the only node that has\nthe filesystem mounted, gfs2 currently tries to replay the local j…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-476"],"vendor":"linux","product":"linux_kernel","affected":["linux_kernel >= 5.7, < 6.6.102","linux_kernel >= 6.7, < 6.12.42","linux_kernel >= 6.13, < 6.15.10","linux_kernel >= 6.16, < 6.16.1"],"patched":["linux_kernel 6.16.1"],"published":"2025-08-22","updated":"2026-10-15","sourceUpdated":"2026-10-15T22:18:48.457","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-38659","references":[{"url":"https://git.kernel.org/stable/c/1a91ba12abef628b43cada87478328274d988e88","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/6784367b2f3cd7b89103de35764f37f152590dbd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/69cf5699a402ee7ae1be53954dc2ae652c0a053c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/6ebe17b359bead383581f729e43f591c1c36e159","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/97c94c7dbddc34d353c83b541b3decabf98d04af","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/deb016c1669002e48c431d6fd32ea1c20ef41756","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/f5426ffbec971a8f7346a57392d3a901bdee5a9b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"epss":0.00172,"epssPercentile":0.06519,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-15T21:52:37.696464Z"},"ingestedAt":"2026-10-15T22:48:25.516Z","slug":"CVE-2025-38659","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ngfs2: No more self recovery\n\nWhen a node withdraws and it turns out that it is the only node that has\nthe filesystem mounted, gfs2 currently tries to replay the local journal\nto bring the filesystem back into a consistent state.  Not only is that\na very bad idea, it has also never worked because gfs2_recover_func()\nwill refuse to do anything during a withdraw.\n\nHowever, before even getting to this point, gfs2_recover_func()\ndereferences sdp->sd_jdesc->jd_inode.  This was a use-after-free before\ncommit 04133b607a78 (\"gfs2: Prevent double iput for journal on error\")\nand is a NULL pointer dereference since then.\n\nSimply get rid of self recovery to fix that.\n\n## Affected\n\n- `linux_kernel >= 5.7, < 6.6.102`\n- `linux_kernel >= 6.7, < 6.12.42`\n- `linux_kernel >= 6.13, < 6.15.10`\n- `linux_kernel >= 6.16, < 6.16.1`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 6.16.1`","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}