The vulnerability of the dec_valid_node_count() function in the fs/f2fs/f2fs.h module of the F2FS file system support for Linux kernel allows a malicious actor to cause a service failure.

🗓️ 02 Jul 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

Vulnerability in dec_valid_node_count() of Flash File System for Linux kernel can cause a service failure.

Reporter	Title	Published	Views	Family All 17
AstraLinux	Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15	19 Jun 202611:10	–	astralinux
CNNVD	Linux kernel 安全漏洞	26 Feb 202500:00	–	cnnvd
CVE	CVE-2022-49380	26 Feb 202502:11	–	cve
Cvelist	CVE-2022-49380 f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count()	26 Feb 202502:11	–	cvelist
Debian CVE	CVE-2022-49380	26 Feb 202502:11	–	debiancve
EUVD	EUVD-2022-54849	21 Oct 202512:31	–	euvd
NVD	CVE-2022-49380	26 Feb 202507:01	–	nvd
OSV	CVE-2022-49380 f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count()	26 Feb 202502:11	–	osv
OSV	DEBIAN-CVE-2022-49380	26 Feb 202507:01	–	osv
OSV	UBUNTU-CVE-2022-49380	26 Feb 202507:01	–	osv

Source	Link
git	www.git.kernel.org/stable/c/2766ddaf45b69252bb8fe526b5b6e56904a9ae7a
git	www.git.kernel.org/stable/c/89d9a48d0cd30429463ea4e37ca83be6773ed5eb
git	www.git.kernel.org/stable/c/ccffa99ae6a1f44797b57444c6a80382a42928fe
git	www.git.kernel.org/stable/c/bce859358d3d5940aa858e40ceee70ee6e76130e
git	www.git.kernel.org/stable/c/f8b3c3fcf33105bc1ee7788e3b51b0a1ae42ae53
cve	www.cve.org/CVERecord
lore	www.lore.kernel.org/linux-cve-announce/2025022647-CVE-2022-49380-24ee@gregkh/
git	www.git.kernel.org/linus/4d17e6fe9293d57081ffdc11e1cf313e25e8fd9e
kernel	www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.198
kernel	www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.121

02 Jul 2026 00:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS 24.6

CVSS 35.5

EPSS0.00247

Flash File System node count function Linux kernel service failure code error