Threats tagged 'ghsa-m9fq-g2m8-9p75'

CVE-2025-38220 is a medium severity vulnerability in the Linux kernel's ext4 filesystem. It involves a NULL pointer dereference crash triggered during processing of symlink inodes from the orphan list. The flaw occurs because the ext4_dirty_journalled_data() function marks folios dirty for all files, but symlink inodes lack the necessary a_ops vector, leading to a crash. The fix updates the function to only mark folios dirty for regular files, preventing the crash.