CVE-2025-40077

🗓️ 28 Oct 2025 11:48:42Reported by LinuxType

F2FS fix to avoid overflow by casting folio->index from pgoff_t to loff_t during left shift.

Reporter	Title	Published	Views	Family All 197
Circl	CVE-2025-40077	28 Oct 202514:57	–	circl
CNNVD	Linux kernel 安全漏洞	28 Oct 202500:00	–	cnnvd
Cvelist	CVE-2025-40077 f2fs: fix to avoid overflow while left shift operation	28 Oct 202511:48	–	cvelist
Debian CVE	CVE-2025-40077	28 Oct 202511:48	–	debiancve
EUVD	EUVD-2025-36451	28 Oct 202511:48	–	euvd
Microsoft CVE	f2fs: fix to avoid overflow while left shift operation	29 Oct 202501:03	–	mscve
NVD	CVE-2025-40077	28 Oct 202512:15	–	nvd
OPENSUSE Linux	kernel-devel-6.17.7-1.1 on GA media (moderate)	5 Nov 202500:00	–	opensuse
OpenVAS	Ubuntu: Security Advisory (USN-8029-1)	13 Feb 202600:00	–	openvas
OpenVAS	Ubuntu: Security Advisory (USN-8029-2)	19 Feb 202600:00	–	openvas

Vulners

CNA

Node

linux linux_kernelRange5.8–6.6.117

linux linux_kernelRange6.7.0–6.12.59

linux linux_kernelRange6.13.0–6.17.3

linux linux_kernelRange6.18.0≥

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/f2fs/compress.c"
    ],
    "versions": [
      {
        "version": "3265d3db1f16395cfc6b8ea9b31b4001d98d05ef",
        "lessThan": "ef49378864bb1ed14cd48c8e687729e12714d849",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3265d3db1f16395cfc6b8ea9b31b4001d98d05ef",
        "lessThan": "0e75a098b0a37f02ca31fe99ac16004c8163cf67",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3265d3db1f16395cfc6b8ea9b31b4001d98d05ef",
        "lessThan": "57d3381dfb97ff73ddd18601017fec21cca80985",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3265d3db1f16395cfc6b8ea9b31b4001d98d05ef",
        "lessThan": "0fe1c6bec54ea68ed8c987b3890f2296364e77bb",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/f2fs/compress.c"
    ],
    "versions": [
      {
        "version": "5.8",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "5.8",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.117",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.59",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.17.3",
        "lessThanOrEqual": "6.17.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/ef49378864bb1ed14cd48c8e687729e12714d849
git	www.git.kernel.org/stable/c/0e75a098b0a37f02ca31fe99ac16004c8163cf67
git	www.git.kernel.org/stable/c/0fe1c6bec54ea68ed8c987b3890f2296364e77bb
git	www.git.kernel.org/stable/c/57d3381dfb97ff73ddd18601017fec21cca80985

11 May 2026 21:42Current

6.4Medium risk

Vulners AI Score6.4

EPSS0.0003