Review reviewHigh

CVE-2025-68261

Linux Linux, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP

In the Linux kernel, the following vulnerability has been resolved: ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() Fix a race between inline data destruction and block mapping. The function ext4_destroy_inline_data_nolock() changes the inode data layout by clearing EXT4_INODE_INLINE_DATA and setting EXT4_INODE_EXTENTS. At the same time, another thread may execute ext4_map_blocks(), which tests EXT4_INODE_EXTENTS to decide whether to call ext4_ext_map_blocks() or ext4_ind_map_blocks(). Without i_data_sem protection, ext4_ind_map_blocks() may receive inode with EXT4_INOD...

CVSS
7.5
EPSS
0.48%
38.7% percentile
CISA KEV
Not listed
Published
2025.12.17
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.48%
Technical severityCVSS 7.5

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() Fix a race between inline data destruction and block mapping. The function ext4_destroy_inline_data_nolock() changes the inode data layout by clearing EXT4_INODE_INLINE_DATA and setting EXT4_INODE_EXTENTS. At the same time, another thread may execute ext4_map_blocks(), which tests EXT4_INODE_EXTENTS to decide whether to call ext4_ext_map_blocks() or ext4_ind_map_blocks(). Without i_data_sem protection, ext4_ind_map_blocks() may receive inode with EXT4_INOD...

Affected product and versions

Product
Linux Linux, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
Affected versions
>= c755e251357a0cee0679081f08c3f4ba797a8009 < b322bac9f01d03190b5abc52be5d9dd9f22a2b41, >= c755e251357a0cee0679081f08c3f4ba797a8009 < 61e03dc3794ebf77a706b85e5a36c9c6d70be6de, >= c755e251357a0cee0679081f08c3f4ba797a8009 < 5b266cf6851ce72b11b067fe02adf5a8687104ad, >= c755e251357a0cee0679081f08c3f4ba797a8009 < 144c48da33a01d92995aeccd8208eb47d2a8e659, >= c755e251357a0cee0679081f08c3f4ba797a8009 < 22a76b0861ae61a299c8e126c1aca8c4fda820fd, >= c755e251357a0cee0679081f08c3f4ba797a8009 < ba8aeff294ac7ff6dfe293663d815c54c5ee218c, >= c755e251357a0cee0679081f08c3f4ba797a8009 < 5cad18e527ba8a9ca5463cc170073eeb5a4826f4, >= c755e251357a0cee0679081f08c3f4ba797a8009 < 0cd8feea8777f8d9b9a862b89c688b049a5c8475, >= 3e96c3fdcfccb321a9e1623f78cc71b44593e965, >= 5781ac24bbd998ebb1ff30143bb06244d847af48, >= 9b06cce3ca4d60d442c39bfa7c058b71b1cee6c2, >= da1e40237f8f3516581b534c484c236a79ccfd14, >= 7cf6b709b6412afd1d93b2c4b37163c3602e3b95, >= 3.16.44 < 3.17, >= 3.18.107 < 3.19, >= 4.4.129 < 4.5, >= 4.9.14 < 4.10, >= 4.10.2 < 4.11, >= 4.11, >= V3.1.6
Fixed versions
No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE
Not available