VDB

CVE-2025-71106

CVE-2025-71106 PUBLISHED CVSS 5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: fs: PM: Fix reverse check in filesystems_freeze_callback() The freeze_all_ptr check in filesystems_freeze_callback() introduced by commit a3f8f8662771 ("power: always freeze efivarfs") is reverse which quite confusingly causes all file systems to be frozen when filesystem_freeze_enabled is false. On my systems it causes the WARN_ON_ONCE() in __set_task_frozen() to trigger, most likely due to an attempt to freeze a file system that is not ready for that. Add a logical negation to the check in question to reverse it as appropriate.

EPSS 0.03% · 7.4th percentile

Risk Scores

CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.03%
7.4th percentile

Affected Products

VendorProductVersions
LinuxLinuxa3f8f8662771285511ae26c4c8d3ba1cd22159b9, 6.18, 0
linuxlinux_kernel6.18, 6.18, 6.18.1

Timeline

  • Jan 13, 2026 CVE ID Reserved
  • Jan 14, 2026 CVE Published
  • Jan 15, 2026 EPSS Score
  • Jan 18, 2026 EPSS Score
  • Jan 21, 2026 EPSS Score
  • Jan 24, 2026 EPSS Score
  • Jan 27, 2026 EPSS Score
  • Jan 30, 2026 EPSS Score
  • Feb 2, 2026 EPSS Score
  • Feb 5, 2026 EPSS Score
  • Feb 7, 2026 EPSS Score
  • Feb 10, 2026 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›