SECUFOCUSNOW
Home›CVE index›CVE-2025-68337
Review reviewHigh

CVE-2025-68337

Linux Linux, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP

In the Linux kernel, the following vulnerability has been resolved: jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted There's issue when file system corrupted: ------------[ cut here ]------------ kernel BUG at fs/jbd2/transaction.c:1289! Oops: invalid opcode: 0000 [#1] SMP KASAN PTI CPU: 5 UID: 0 PID: 2031 Comm: mkdir Not tainted 6.18.0-rc1-next RIP: 0010:jbd2_journal_get_create_access+0x3b6/0x4d0 RSP: 0018:ffff888117aafa30 EFLAGS: 00010202 RAX: 0000000000000000 RBX: ffff88811a86b000 RCX: ffffffff89a63534 RDX: 1ffff110200ec602 RSI: 0000000000000004 RDI: ffff...

CVSS
7.5
EPSS
0.47%
38.0% percentile
CISA KEV
Not listed
Published
2025.12.23
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.47%
Technical severityCVSS 7.5

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted There's issue when file system corrupted: ------------[ cut here ]------------ kernel BUG at fs/jbd2/transaction.c:1289! Oops: invalid opcode: 0000 [#1] SMP KASAN PTI CPU: 5 UID: 0 PID: 2031 Comm: mkdir Not tainted 6.18.0-rc1-next RIP: 0010:jbd2_journal_get_create_access+0x3b6/0x4d0 RSP: 0018:ffff888117aafa30 EFLAGS: 00010202 RAX: 0000000000000000 RBX: ffff88811a86b000 RCX: ffffffff89a63534 RDX: 1ffff110200ec602 RSI: 0000000000000004 RDI: ffff...

Affected product and versions

Product
Linux Linux, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
Affected versions
>= 470decc613ab2048b619a01028072d932d9086ee < 71bbe06c40fc59b5b15661eca8ff307f4176d7f9, >= 470decc613ab2048b619a01028072d932d9086ee < ed62fd8c15d41c4127ad16b8219b63124f5962bc, >= 470decc613ab2048b619a01028072d932d9086ee < 3faac6531d4818cd6be45e5bbf32937bbbc795c0, >= 470decc613ab2048b619a01028072d932d9086ee < b4f8eabf6d991bd41fabcdf9302c4b3eab590cf4, >= 470decc613ab2048b619a01028072d932d9086ee < a2a7f854d154a3e9232fec80782dad951655f52f, >= 470decc613ab2048b619a01028072d932d9086ee < bf34c72337e40c4670cceeb79b353356933a254b, >= 470decc613ab2048b619a01028072d932d9086ee < aa1703f3f706ea0867fb1991dcac709c9ec94cfb, >= 470decc613ab2048b619a01028072d932d9086ee < 986835bf4d11032bba4ab8414d18fce038c61bb4, >= 2.6.19, >= V3.1.6
Fixed versions
No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE
Not available