CVE-2025-38652

🗓️ 22 Aug 2025 16:00:56Reported by LinuxType

cve🔗 web.nvd.nist.gov👁 33 Views🌐 WEB

Kernel f2fs fix for out-of-bounds access in devs.path; adds one byte for null terminator.

Reporter	Title	Published	Views	Family All 171
AstraLinux	Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15	19 Jun 202611:10	–	astralinux
CBLMariner	CVE-2025-38652 affecting package kernel for versions less than 6.6.104.2-1	1 Oct 202519:21	–	cbl_mariner
Circl	CVE-2025-38652	7 Jan 202618:06	–	circl
CNNVD	Linux kernel 安全漏洞	22 Aug 202500:00	–	cnnvd
Cvelist	CVE-2025-38652 f2fs: fix to avoid out-of-boundary access in devs.path	22 Aug 202516:00	–	cvelist
Debian	[SECURITY] [DLA 4327-1] linux security update	13 Oct 202509:16	–	debian
Debian	[SECURITY] [DLA 4328-1] linux-6.1 security update	13 Oct 202509:16	–	debian
Debian CVE	CVE-2025-38652	22 Aug 202516:00	–	debiancve
Tenable Nessus	Debian dla-4327 : ata-modules-5.10.0-35-armmp-di - security update	13 Oct 202500:00	–	nessus
Tenable Nessus	Debian dla-4328 : linux-config-6.1 - security update	13 Oct 202500:00	–	nessus

NVD

Vulners

CNA

Node

linux linux_kernelRange4.10–5.4.297

linux linux_kernelRange5.5–5.10.241

linux linux_kernelRange5.11–5.15.190

linux linux_kernelRange5.16–6.1.148

linux linux_kernelRange6.2–6.6.102

linux linux_kernelRange6.7–6.12.42

linux linux_kernelRange6.13–6.15.10

linux linux_kernelRange6.16–6.16.1

Node

debian debian_linuxMatch11.0

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/f2fs/f2fs.h"
    ],
    "versions": [
      {
        "version": "3c62be17d4f562f43fe1d03b48194399caa35aa5",
        "lessThan": "dc0172c74bd9edaee7bea2ebb35f3dbd37a8ae80",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3c62be17d4f562f43fe1d03b48194399caa35aa5",
        "lessThan": "1cf1ff15f262e8baf12201b270b6a79f9d119b2d",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3c62be17d4f562f43fe1d03b48194399caa35aa5",
        "lessThan": "666b7cf6ac9aa074b8319a2b68cba7f2c30023f0",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3c62be17d4f562f43fe1d03b48194399caa35aa5",
        "lessThan": "3466721f06edff834f99d9f49f23eabc6b2cb78e",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3c62be17d4f562f43fe1d03b48194399caa35aa5",
        "lessThan": "345fc8d1838f3f8be7c8ed08d86a13dedef67136",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3c62be17d4f562f43fe1d03b48194399caa35aa5",
        "lessThan": "70849d33130a2cf1d6010069ed200669c8651fbd",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3c62be17d4f562f43fe1d03b48194399caa35aa5",
        "lessThan": "755427093e4294ac111c3f9e40d53f681a0fbdaa",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3c62be17d4f562f43fe1d03b48194399caa35aa5",
        "lessThan": "1b1efa5f0e878745e94a98022e8edc675a87d78e",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3c62be17d4f562f43fe1d03b48194399caa35aa5",
        "lessThan": "5661998536af52848cc4d52a377e90368196edea",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/f2fs/f2fs.h"
    ],
    "versions": [
      {
        "version": "4.10",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "4.10",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.4.297",
        "lessThanOrEqual": "5.4.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.241",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.190",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.148",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.102",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.42",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.15.10",
        "lessThanOrEqual": "6.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.16.1",
        "lessThanOrEqual": "6.16.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.17",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/5661998536af52848cc4d52a377e90368196edea
git	www.git.kernel.org/stable/c/3466721f06edff834f99d9f49f23eabc6b2cb78e
git	www.git.kernel.org/stable/c/345fc8d1838f3f8be7c8ed08d86a13dedef67136
git	www.git.kernel.org/stable/c/70849d33130a2cf1d6010069ed200669c8651fbd
git	www.git.kernel.org/stable/c/666b7cf6ac9aa074b8319a2b68cba7f2c30023f0
git	www.git.kernel.org/stable/c/755427093e4294ac111c3f9e40d53f681a0fbdaa
git	www.git.kernel.org/stable/c/dc0172c74bd9edaee7bea2ebb35f3dbd37a8ae80
git	www.git.kernel.org/stable/c/1cf1ff15f262e8baf12201b270b6a79f9d119b2d
git	www.git.kernel.org/stable/c/1b1efa5f0e878745e94a98022e8edc675a87d78e
lists	www.lists.debian.org/debian-lts-announce/2025/10/msg00007.html

Parameter	Position	Path	Description	CWE
devs.path	path	/mnt/f2fs/012345678901234567890123456789012345678901234567890123	Out-of-bounds device path handling in f2fs leading to incorrect parsing when path length equals MAX_PATH_LEN	CWE-125
path	path	/mnt/f2fs/012345678901234567890123456789012345678901234567890123	Out-of-bounds device path handling in f2fs leading to incorrect parsing when path length equals MAX_PATH_LEN	CWE-125
MAX_PATH_LEN	path	/mnt/f2fs/012345678901234567890123456789012345678901234567890123	Out-of-bounds device path handling in f2fs leading to incorrect parsing when path length equals MAX_PATH_LEN	CWE-125
/mnt/f2fs/file	path	/mnt/f2fs/file	PoC uses an oversized file path to trigger edge-case in f2fs path handling during truncation	CWE-125
devs.path	path	/mnt/f2fs/012345678901234567890123456789012345678901234567890123\xff\x01	Device path contains non-printable bytes to exploit path parsing after MAX_PATH_LEN	CWE-125
path	path	/mnt/f2fs/012345678901234567890123456789012345678901234567890123\xff\x01	Device path contains non-printable bytes to exploit path parsing after MAX_PATH_LEN	CWE-125
MAX_PATH_LEN with non-printable chars	path	/mnt/f2fs/012345678901234567890123456789012345678901234567890123\xff\x01	Device path contains non-printable bytes to exploit path parsing after MAX_PATH_LEN	CWE-125

17 Jun 2026 09:17Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.1

EPSS0.00164

CWE-125