{"id":69675,"date":"2025-09-07T22:32:29","date_gmt":"2025-09-07T19:02:29","guid":{"rendered":"https:\/\/afaghhosting.net\/blog\/cve-2025-39731-f2fs-vm_unmap_ram-may-be-called-from-an-invalid-context\/"},"modified":"2025-09-07T22:32:29","modified_gmt":"2025-09-07T19:02:29","slug":"cve-2025-39731-f2fs-vm_unmap_ram-may-be-called-from-an-invalid-context","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/cve-2025-39731-f2fs-vm_unmap_ram-may-be-called-from-an-invalid-context\/","title":{"rendered":"CVE-2025-39731 &#8211; f2fs: vm_unmap_ram() may be called from an invalid context"},"content":{"rendered":"<p><strong>CVE ID : <\/strong>CVE-2025-39731<br \/>\n<br \/>\n<strong>Published : <\/strong> Sept. 7, 2025, 4:15 p.m. | 1\u00a0hour, 9\u00a0minutes ago<br \/>\n<br \/>\n<strong>Description : <\/strong>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>f2fs: vm_unmap_ram() may be called from an invalid context<\/p>\n<p>When testing F2FS with xfstests using UFS backed virtual disks the<br \/>\nkernel complains sometimes that f2fs_release_decomp_mem() calls<br \/>\nvm_unmap_ram() from an invalid context. Example trace from<br \/>\nf2fs\/007 test:<\/p>\n<p>f2fs\/007 5s &#8230;  [12:59:38][    8.902525] run fstests f2fs\/007<br \/>\n[   11.468026] BUG: sleeping function called from invalid context at mm\/vmalloc.c:2978<br \/>\n[   11.471849] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 68, name: irq\/22-ufshcd<br \/>\n[   11.475357] preempt_count: 1, expected: 0<br \/>\n[   11.476970] RCU nest depth: 0, expected: 0<br \/>\n[   11.478531] CPU: 0 UID: 0 PID: 68 Comm: irq\/22-ufshcd Tainted: G        W           6.16.0-rc5-xfstests-ufs-g40f92e79b0aa #9 PREEMPT(none)<br \/>\n[   11.478535] Tainted: [W]=WARN<br \/>\n[   11.478536] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04\/01\/2014<br \/>\n[   11.478537] Call Trace:<br \/>\n[   11.478543]\n[   11.478545]  dump_stack_lvl+0x4e\/0x70<br \/>\n[   11.478554]  __might_resched.cold+0xaf\/0xbe<br \/>\n[   11.478557]  vm_unmap_ram+0x21\/0xb0<br \/>\n[   11.478560]  f2fs_release_decomp_mem+0x59\/0x80<br \/>\n[   11.478563]  f2fs_free_dic+0x18\/0x1a0<br \/>\n[   11.478565]  f2fs_finish_read_bio+0xd7\/0x290<br \/>\n[   11.478570]  blk_update_request+0xec\/0x3b0<br \/>\n[   11.478574]  ? sbitmap_queue_clear+0x3b\/0x60<br \/>\n[   11.478576]  scsi_end_request+0x27\/0x1a0<br \/>\n[   11.478582]  scsi_io_completion+0x40\/0x300<br \/>\n[   11.478583]  ufshcd_mcq_poll_cqe_lock+0xa3\/0xe0<br \/>\n[   11.478588]  ufshcd_sl_intr+0x194\/0x1f0<br \/>\n[   11.478592]  ufshcd_threaded_intr+0x68\/0xb0<br \/>\n[   11.478594]  ? __pfx_irq_thread_fn+0x10\/0x10<br \/>\n[   11.478599]  irq_thread_fn+0x20\/0x60<br \/>\n[   11.478602]  ? __pfx_irq_thread_fn+0x10\/0x10<br \/>\n[   11.478603]  irq_thread+0xb9\/0x180<br \/>\n[   11.478605]  ? __pfx_irq_thread_dtor+0x10\/0x10<br \/>\n[   11.478607]  ? __pfx_irq_thread+0x10\/0x10<br \/>\n[   11.478609]  kthread+0x10a\/0x230<br \/>\n[   11.478614]  ? __pfx_kthread+0x10\/0x10<br \/>\n[   11.478615]  ret_from_fork+0x7e\/0xd0<br \/>\n[   11.478619]  ? __pfx_kthread+0x10\/0x10<br \/>\n[   11.478621]  ret_from_fork_asm+0x1a\/0x30<br \/>\n[   11.478623]  <\/p>\n<p>This patch modifies in_task() check inside f2fs_read_end_io() to also<br \/>\ncheck if interrupts are disabled. This ensures that pages are unmapped<br \/>\nasynchronously in an interrupt handler.<br \/>\n<br \/>\n<strong>Severity:<\/strong> 0.0 | NA<br \/>\n<br \/>\nVisit the link for more details, such as CVSS details, affected products, timeline, and more&#8230;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>CVE ID : CVE-2025-39731 Published : Sept. 7, 2025, 4:15 p.m. | 1\u00a0hour, 9\u00a0minutes ago Description : In the Linux kernel, the following vulnerability has been resolved: f2fs: vm_unmap_ram() may be called from an invalid context When testing F2FS with xfstests using UFS backed virtual disks the kernel complains sometimes that f2fs_release_decomp_mem() calls vm_unmap_ram() from &hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-69675","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/69675","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=69675"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/69675\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=69675"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=69675"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=69675"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}