CVE-2025-39734

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-39734", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2025-04-16T07:20:57.119Z", "datePublished": "2025-09-07T15:16:22.015Z", "dateUpdated": "2026-05-23T16:00:36.146Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-05-23T16:00:36.146Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRevert \"fs/ntfs3: Replace inode_trylock with inode_lock\"\n\nThis reverts commit 69505fe98f198ee813898cbcaf6770949636430b.\n\nInitially, conditional lock acquisition was removed to fix an xfstest bug\nthat was observed during internal testing. The deadlock reported by syzbot\nis resolved by reintroducing conditional acquisition. The xfstest bug no\nlonger occurs on kernel version 6.16-rc1 during internal testing. I\nassume that changes in other modules may have contributed to this."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/ntfs3/file.c"], "versions": [{"version": "e3e3b3eb54feaf6400800812c8d0f95a7213923d", "lessThan": "bec8109f957a6e193e52d1728799994c8005ca83", "status": "affected", "versionType": "git"}, {"version": "7a498fc945080bccc25fdc36f1d663798441158b", "lessThan": "1903a6c1f2818154f6bc87bceaaecafa92b6ac5c", "status": "affected", "versionType": "git"}, {"version": "53173e3865acb06f3e86c703696510c12fecc612", "lessThan": "a936be9b5f51c4d23f66fb673e9068c6b08104a4", "status": "affected", "versionType": "git"}, {"version": "69505fe98f198ee813898cbcaf6770949636430b", "lessThan": "b356ee013a79e7e3147bfe065de376706c5d2ee9", "status": "affected", "versionType": "git"}, {"version": "69505fe98f198ee813898cbcaf6770949636430b", "lessThan": "7ce6f83ca9d52c9245b7a017466fc4baa1241b0b", "status": "affected", "versionType": "git"}, {"version": "69505fe98f198ee813898cbcaf6770949636430b", "lessThan": "bd20733746263acaaf2a21881665db27ee4303d5", "status": "affected", "versionType": "git"}, {"version": "69505fe98f198ee813898cbcaf6770949636430b", "lessThan": "a49f0abd8959048af18c6c690b065eb0d65b2d21", "status": "affected", "versionType": "git"}, {"version": "d5ad80aabd5a76a5de52b7663b1f3223dd01ea38", "status": "affected", "versionType": "git"}, {"version": "5.15.165", "lessThan": "5.15.190", "status": "affected", "versionType": "semver"}, {"version": "6.1.103", "lessThan": "6.1.148", "status": "affected", "versionType": "semver"}, {"version": "6.6.44", "lessThan": "6.6.102", "status": "affected", "versionType": "semver"}, {"version": "6.10.3", "lessThan": "6.11", "status": "affected", "versionType": "semver"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/ntfs3/file.c"], "versions": [{"version": "6.11", "status": "affected"}, {"version": "0", "lessThan": "6.11", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.190", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.148", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.102", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.42", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.15.10", "lessThanOrEqual": "6.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.16.1", "lessThanOrEqual": "6.16.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.17", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.15.165", "versionEndExcluding": "5.15.190"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.1.103", "versionEndExcluding": "6.1.148"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6.44", "versionEndExcluding": "6.6.102"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.11", "versionEndExcluding": "6.12.42"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.11", "versionEndExcluding": "6.15.10"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.11", "versionEndExcluding": "6.16.1"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.11", "versionEndExcluding": "6.17"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.10.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/bec8109f957a6e193e52d1728799994c8005ca83"}, {"url": "https://git.kernel.org/stable/c/1903a6c1f2818154f6bc87bceaaecafa92b6ac5c"}, {"url": "https://git.kernel.org/stable/c/a936be9b5f51c4d23f66fb673e9068c6b08104a4"}, {"url": "https://git.kernel.org/stable/c/b356ee013a79e7e3147bfe065de376706c5d2ee9"}, {"url": "https://git.kernel.org/stable/c/7ce6f83ca9d52c9245b7a017466fc4baa1241b0b"}, {"url": "https://git.kernel.org/stable/c/bd20733746263acaaf2a21881665db27ee4303d5"}, {"url": "https://git.kernel.org/stable/c/a49f0abd8959048af18c6c690b065eb0d65b2d21"}], "title": "Revert \"fs/ntfs3: Replace inode_trylock with inode_lock\"", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"title": "CVE Program Container", "references": [{"url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-11-03T17:42:50.659Z"}}]}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["fs/ntfs3/file.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "bec8109f957a6e193e52d1728799994c8005ca83", "status": "affected", "version": "e3e3b3eb54feaf6400800812c8d0f95a7213923d", "versionType": "git"}, {"lessThan": "1903a6c1f2818154f6bc87bceaaecafa92b6ac5c", "status": "affected", "version": "7a498fc945080bccc25fdc36f1d663798441158b", "versionType": "git"}, {"lessThan": "a936be9b5f51c4d23f66fb673e9068c6b08104a4", "status": "affected", "version": "53173e3865acb06f3e86c703696510c12fecc612", "versionType": "git"}, {"lessThan": "b356ee013a79e7e3147bfe065de376706c5d2ee9", "status": "affected", "version": "69505fe98f198ee813898cbcaf6770949636430b", "versionType": "git"}, {"lessThan": "7ce6f83ca9d52c9245b7a017466fc4baa1241b0b", "status": "affected", "version": "69505fe98f198ee813898cbcaf6770949636430b", "versionType": "git"}, {"lessThan": "bd20733746263acaaf2a21881665db27ee4303d5", "status": "affected", "version": "69505fe98f198ee813898cbcaf6770949636430b", "versionType": "git"}, {"lessThan": "a49f0abd8959048af18c6c690b065eb0d65b2d21", "status": "affected", "version": "69505fe98f198ee813898cbcaf6770949636430b", "versionType": "git"}, {"status": "affected", "version": "d5ad80aabd5a76a5de52b7663b1f3223dd01ea38", "versionType": "git"}, {"lessThan": "5.15.190", "status": "affected", "version": "5.15.165", "versionType": "semver"}, {"lessThan": "6.1.148", "status": "affected", "version": "6.1.103", "versionType": "semver"}, {"lessThan": "6.6.102", "status": "affected", "version": "6.6.44", "versionType": "semver"}, {"lessThan": "6.11", "status": "affected", "version": "6.10.3", "versionType": "semver"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["fs/ntfs3/file.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.11"}, {"lessThan": "6.11", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.190", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.148", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.102", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.42", "versionType": "semver"}, {"lessThanOrEqual": "6.15.*", "status": "unaffected", "version": "6.15.10", "versionType": "semver"}, {"lessThanOrEqual": "6.16.*", "status": "unaffected", "version": "6.16.1", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "6.17", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "894B4AA7-84DB-4ED2-BBEF-DEA603BFDDF4", "versionEndExcluding": "5.15.190", "versionStartIncluding": "5.15.165", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "6D05997B-3F87-4FC5-B9A9-16291701333D", "versionEndExcluding": "6.1.148", "versionStartIncluding": "6.1.103", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "7EF49471-C6D9-4CF9-BDE3-33D34B686E3A", "versionEndExcluding": "6.6.102", "versionStartIncluding": "6.6.44", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "CA9CC916-29D8-4702-BF91-1E74C415404B", "versionEndExcluding": "6.12.42", "versionStartIncluding": "6.10.3", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "5890C690-B295-40C2-9121-FF5F987E5142", "versionEndExcluding": "6.15.10", "versionStartIncluding": "6.13", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "58182352-D7DF-4CC9-841E-03C1D852C3FB", "versionEndExcluding": "6.16.1", "versionStartIncluding": "6.16", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRevert \"fs/ntfs3: Replace inode_trylock with inode_lock\"\n\nThis reverts commit 69505fe98f198ee813898cbcaf6770949636430b.\n\nInitially, conditional lock acquisition was removed to fix an xfstest bug\nthat was observed during internal testing. The deadlock reported by syzbot\nis resolved by reintroducing conditional acquisition. The xfstest bug no\nlonger occurs on kernel version 6.16-rc1 during internal testing. I\nassume that changes in other modules may have contributed to this."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nRevertir 'fs/ntfs3: Reemplazar inode_trylock con inode_lock'\n\nEsto revierte el commit 69505fe98f198ee813898cbcaf6770949636430b.\n\nInicialmente, la adquisici\u00f3n condicional de bloqueo fue eliminada para corregir un error de xfstest que fue observado durante pruebas internas. El interbloqueo reportado por syzbot se resuelve al reintroducir la adquisici\u00f3n condicional. El error de xfstest ya no ocurre en la versi\u00f3n de kernel 6.16-rc1 durante pruebas internas. Asumo que cambios en otros m\u00f3dulos pueden haber contribuido a esto."}], "id": "CVE-2025-39734", "lastModified": "2026-10-19T21:10:00.160", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2025-09-07T16:15:50.370", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/1903a6c1f2818154f6bc87bceaaecafa92b6ac5c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/7ce6f83ca9d52c9245b7a017466fc4baa1241b0b"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/a49f0abd8959048af18c6c690b065eb0d65b2d21"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/a936be9b5f51c4d23f66fb673e9068c6b08104a4"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/b356ee013a79e7e3147bfe065de376706c5d2ee9"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/bd20733746263acaaf2a21881665db27ee4303d5"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/bec8109f957a6e193e52d1728799994c8005ca83"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: Revert \"fs/ntfs3: Replace inode_trylock with inode_lock\"", "id": "2393732", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2393732"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "details": ["No description is available for this CVE."], "name": "CVE-2025-39734", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2025-09-07T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2025-39734\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-39734\nhttps://lore.kernel.org/linux-cve-announce/2025090731-CVE-2025-39734-efa5@gregkh/T"], "threat_severity": "Moderate"}

{"created": "2025-09-08T15:17:38.588348+00:00", "updated": "2025-09-08T15:17:38.588395+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}