CVE-2025-39753
NoneCVSS
—
EPSS
0.2%
Published
Sep 11, 2025
CISA due date
—
Cloudanix analysis
A small gap in the Linux kernel's handling of a clustered file system can produce unwanted warning messages when the system moves memory pages around.
- Exploitation
- Other
- Attacker needs
- Other
- Complexity
- Theoretical
- Impact
- Other
- Component
- OS kernel
- Class
- Other
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
GFS2 address space operations for resource groups and metadata lack a migrate_folio handler, triggering a kernel warning in the migration path after the writepage call was removed.
Why it matters to the business
Systems running GFS2 may produce spurious kernel warnings during memory compaction or migration, complicating diagnostics and potentially failing automated test suites; low urgency given the nature of the issue and absence from known exploitation lists.
How an attack unfolds
No practical exploitation path exists; the condition is a missing callback that surfaces only as a warning during internal kernel folio migration on GFS2 volumes.
How to fix it
Update the Linux kernel to a version containing commit 9d9b053f7f9c5a35049abe56af9e6ac70b6b0e4b or later; rebuild and reboot with the patched GFS2 aops that register migrate_folio.
How to confirm the fix worked
Boot the updated kernel, run xfstests that exercise GFS2 migration, and confirm the warning "gfs2_meta_aops does not implement migrate_folio" no longer appears in dmesg.
How to detect it
Search kernel logs (dmesg, journalctl) for the exact warning string referencing gfs2_meta_aops and migrate_folio; no persistent artifacts or network indicators are produced.
What your security team should do
- Apply the referenced upstream commit or distribution kernel update containing the migrate_folio handler.
- Monitor kernel logs for the specific warning string during memory-pressure workloads on GFS2.
- Prioritize the update only after higher-severity kernel issues; no immediate operational impact expected.
The record
In the Linux kernel, the following vulnerability has been resolved: gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops Clears up the warning added in 7ee3647243e5 ("migrate: Remove call to ->writepage") that occurs in various xfstests, causing "something found in dmesg" failures. [ 341.136573] gfs2_meta_aops does not implement migrate_folio [ 341.136953] WARNING: CPU: 1 PID: 36 at mm/migrate.c:944 move_to_new_folio+0x2f8/0x300
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | linux | 0 | No fix |
| Debian:12 | linux | 0 | No fix |
| Debian:13 | linux | 0 | 6.12.43-1 |
| Debian:14 | linux | 0 | 6.16.3-1 |
| Linux | Kernel | 0 | 6.6.103 |
| Linux | Kernel | 6.12.0 | 6.12.43 |
| openSUSE:Leap 16.0 | dtb-aarch64 | 0 | 6.12.0-160000.27.1 |
| openSUSE:Leap 16.0 | kernel-64kb | 0 | 6.12.0-160000.27.1 |
| openSUSE:Leap 16.0 | kernel-azure | 0 | 6.12.0-160000.27.1 |
| openSUSE:Leap 16.0 | kernel-default | 0 | 6.12.0-160000.27.1 |
| openSUSE:Leap 16.0 | kernel-default-base | 0 | 6.12.0-160000.27.1.160000.2.8 |
| openSUSE:Leap 16.0 | kernel-docs | 0 | 6.12.0-160000.27.1 |
| openSUSE:Leap 16.0 | kernel-kvmsmall | 0 | 6.12.0-160000.27.1 |
| openSUSE:Leap 16.0 | kernel-obs-build | 0 | 6.12.0-160000.27.1 |
| openSUSE:Leap 16.0 | kernel-obs-qa | 0 | 6.12.0-160000.27.1 |
| openSUSE:Leap 16.0 | kernel-rt | 0 | 6.12.0-160000.27.1 |
| openSUSE:Leap 16.0 | kernel-source | 0 | 6.12.0-160000.27.1 |
| openSUSE:Leap 16.0 | kernel-syms | 0 | 6.12.0-160000.27.1 |
| openSUSE:Leap 16.0 | kernel-zfcpdump | 0 | 6.12.0-160000.27.1 |
Related vulnerabilities
- CVE-2025-39885 In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix recursive… Also affects linux
- CVE-2025-39883 In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure… Also affects linux
- CVE-2025-39876 In the Linux kernel, the following vulnerability has been resolved: net: fec: Fix… Also affects linux
- CVE-2025-39869 In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: edma… Also affects linux
- CVE-2025-39873 In the Linux kernel, the following vulnerability has been resolved: can: xilinx_can… Also affects linux
- CVE-2025-39863 In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix… Also affects linux
- CVE-2025-39865 In the Linux kernel, the following vulnerability has been resolved: tee: fix NULL pointer… Also affects linux
- CVE-2025-39866 In the Linux kernel, the following vulnerability has been resolved: fs: writeback: fix… Also affects linux