CVE-2025-21811: 
Linux Kernel vulnerability analysis and mitigation

A race condition vulnerability was discovered in the Linux kernel's NILFS2 filesystem, identified as CVE-2025-21811. The issue was found in the nilfs_lookup_dirty_data_buffers() function, which accesses buffers attached to dirty data folios/pages without proper locking mechanisms. This vulnerability was disclosed on February 27, 2025, affecting the Linux kernel's NILFS2 filesystem implementation (NVD).

The vulnerability exists in the nilfs_lookup_dirty_data_buffers() function, which iterates through buffers attached to dirty data folios/pages without proper locking. When the filesystem degenerates to read-only mode, nilfs_clear_folio_dirty() may be called asynchronously, potentially causing use-after-free issues when buffers lose their dirty state protection and are unintentionally freed by try_to_free_buffers(). The vulnerability has been assigned a CVSS v3.1 Base Score of 7.8 (HIGH) with the vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (NVD, Kernel Git).

The vulnerability can lead to use-after-free issues in the kernel's filesystem handling, potentially resulting in system crashes, data corruption, or privilege escalation. The issue affects systems using the NILFS2 filesystem, particularly when the filesystem transitions to read-only mode (NVD).

The vulnerability requires local access and can be triggered when the filesystem transitions to read-only mode. It has been classified as CWE-416 (Use After Free) with a high severity rating, indicating relatively straightforward exploitation under the right conditions (NVD).

The issue has been fixed by adjusting the lock section in the nilfs_lookup_dirty_data_buffers() function. The fix involves maintaining proper locking of folios/pages while accessing their buffers, preventing the race condition that could lead to use-after-free issues. The patch has been merged into the mainline kernel and is being backported to stable kernel versions (Kernel Git).