{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2025-71237",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2025-71237",
    "idYear": 2025,
    "status": "PUBLISHED",
    "publishedAt": "2026-02-18T14:53:22.436Z",
    "updatedAt": "2026-05-11T21:56:59.574Z",
    "importedAt": "2026-10-24T01:57:44.935Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "nilfs2: Fix potential block overflow that cause system hang",
      "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: Fix potential block overflow that cause system hang\n\nWhen a user executes the FITRIM command, an underflow can occur when\ncalculating nblocks if end_block is too small. Since nblocks is of\ntype sector_t, which is u64, a negative nblocks value will become a\nvery large positive integer. This ultimately leads to the block layer\nfunction __blkdev_issue_discard() taking an excessively long time to\nprocess the bio chain, and the ns_segctor_sem lock remains held for a\nlong period. This prevents other tasks from acquiring the ns_segctor_sem\nlock, resulting in the hang reported by syzbot in [1].\n\nIf the ending block is too small, typically if it is smaller than 4KiB\nrange, depending on the usage of the segment 0, it may be possible to\nattempt a discard request beyond the device size causing the hang.\n\nExiting successfully and assign the discarded size (0 in this case)\nto range->len.\n\nAlthough the start and len values in the user input range are too small,\na conservative strategy is adopted here to safely ignore them, which is\nequivalent to a no-op; it will not perform any trimming and will not\nthrow an error.\n\n[1]\ntask:segctord state:D stack:28968 pid:6093 tgid:6093  ppid:2 task_flags:0x200040 flags:0x00080000\nCall Trace:\n rwbase_write_lock+0x3dd/0x750 kernel/locking/rwbase_rt.c:272\n nilfs_transaction_lock+0x253/0x4c0 fs/nilfs2/segment.c:357\n nilfs_segctor_thread_construct fs/nilfs2/segment.c:2569 [inline]\n nilfs_segctor_thread+0x6ec/0xe00 fs/nilfs2/segment.c:2684\n\n[ryusuke: corrected part of the commit message about the consequences]",
      "affected": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "82e11e857be3ffd2a0a952c9db8aa2379e2b9e44",
              "status": "affected",
              "versionType": "git",
              "lessThan": "6457d3ee41a4c15082ac49c5aa7fb933b4a043f3"
            },
            {
              "version": "82e11e857be3ffd2a0a952c9db8aa2379e2b9e44",
              "status": "affected",
              "versionType": "git",
              "lessThan": "ba18e5f22f26aa4ef78bc3e81f639d1d4f3845e6"
            },
            {
              "version": "82e11e857be3ffd2a0a952c9db8aa2379e2b9e44",
              "status": "affected",
              "versionType": "git",
              "lessThan": "2438982f635e6cc2009be68ba2efb2998727d8d4"
            },
            {
              "version": "82e11e857be3ffd2a0a952c9db8aa2379e2b9e44",
              "status": "affected",
              "versionType": "git",
              "lessThan": "df1e20796c9f3d541cca47fb72e4369ea135642d"
            },
            {
              "version": "82e11e857be3ffd2a0a952c9db8aa2379e2b9e44",
              "status": "affected",
              "versionType": "git",
              "lessThan": "ea2278657ad0d62596589fbe2caf995e189e65e7"
            },
            {
              "version": "82e11e857be3ffd2a0a952c9db8aa2379e2b9e44",
              "status": "affected",
              "versionType": "git",
              "lessThan": "4aa45f841413cca81882602b4042c53502f34cad"
            },
            {
              "version": "82e11e857be3ffd2a0a952c9db8aa2379e2b9e44",
              "status": "affected",
              "versionType": "git",
              "lessThan": "b8c5ee234bd54f1447c846101fdaef2cf70c2149"
            },
            {
              "version": "82e11e857be3ffd2a0a952c9db8aa2379e2b9e44",
              "status": "affected",
              "versionType": "git",
              "lessThan": "ed527ef0c264e4bed6c7b2a158ddf516b17f5f66"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "versions": [
            {
              "version": "3.15",
              "status": "affected"
            },
            {
              "version": "0",
              "status": "unaffected",
              "versionType": "semver",
              "lessThan": "3.15"
            },
            {
              "version": "5.10.251",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "version": "5.15.201",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "version": "6.1.164",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "version": "6.6.125",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "version": "6.12.72",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "version": "6.18.11",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "version": "6.19.1",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.19.*"
            },
            {
              "version": "7.0",
              "status": "unaffected",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ]
        }
      ]
    }
  }
}