SUSE CVE-2025-37739

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid out-of-bounds access in f2fstruncateinodeblocks syzbot reports an UBSAN issue as below: ------------ cut here ------------ UBSAN: array-index-out-of-bounds in fs/f2fs/node.h:381:10 index 18446744073709550692 is...

The vulnerability of the f2fs_setattr() function in the fs/f2fs/file.c module of the F2FS file system support in Linux operating systems allows a attacker to compromise the integrity of protected information.

The vulnerability of the f2fssetattr function in the fs/f2fs/file.c module of the F2FS file system support in Linux operating systems is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability allows a remote attacker to compromise the integrity of...

UBUNTU-CVE-2022-49738

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on iextraisize in isalive syzbot found a f2fs bug: BUG: KASAN: slab-out-of-bounds in datablkaddr fs/f2fs/f2fs.h:2891 inline BUG: KASAN: slab-out-of-bounds in isalive fs/f2fs/gc.c:1117 inline BUG: KASA...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from f2fs not initializing locks in a timely manner...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from f2fs not performing integrity checks on iextraisize...

The vulnerability of the __submit_discard_cmd() function in the file system of the F2FS kernel in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the submitdiscardcmd function in the file system of F2FS in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the is_end_zone_blkaddr() function in the fs/f2fs/data.c file of the F2FS kernel of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the isendzoneblkaddr function in the fs/f2fs/data.c file of the F2FS file system in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

jffs2: Prevent rtime decompress memory corruption

...

SUSE CVE-2022-49380

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid f2fsbugon in decvalidnodecount As Yanming reported in bugzilla: https://bugzilla.kernel.org/showbug.cgi?id=215897 I have encountered a bug in F2FS file system in kernel v5.17. The kernel should enable...

SUSE CVE-2022-49425

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix dereference of stale list iterator after loop body The list iterator variable will be a bogus pointer if no break was hit. Dereferencing it cur-page in this case could load an out-of-bounds/undefined value making it...

UBUNTU-CVE-2022-49361

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check for inline inode Yanming reported a kernel bug in Bugzilla kernel 1, which can be reproduced. The bug message is: The kernel message is shown below: kernel BUG at fs/inode.c:611! Call Trace:...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from f2fs potentially entering an infinite loop when refreshing a node page...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the use of mutexlock by the f2fs driver in the statshow function resulting in a hang...

The vulnerability of the f2fs component of the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the f2fs component of the Linux operating system’s kernel is related to the assignment of the NULL pointer in the f2fsset inodeflags function. Exploiting this vulnerability can allow a hacker to trigger a service failure...

The vulnerability of the f2fs component of the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the f2fs component of the Linux operating system’s kernel is related to insufficient input validation. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-2866

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc4 Description The Linux kernel had an issue in the f2fs file system related to the management of slab caches for extended attributes. Specifically, the system was creating per-superblock slab caches, whi...

DEBIAN-CVE-2024-56692

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on node blkaddr in truncatenode syzbot reports a f2fs bug as below: ------------ cut here ------------ kernel BUG at fs/f2fs/segment.c:2534! RIP: 0010:f2fsinvalidateblocks+0x35f/0x370...

SUSE CVE-2024-53221

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix null-ptr-deref in f2fssubmitpagebio There's issue as follows when concurrently installing the f2fs.ko module and mounting the f2fs file system: KASAN: null-ptr-deref in range 0x0000000000000020-0x0000000000000027 RIP:...

DEBIAN-CVE-2024-53220

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to account dirty data in getsecsrequired It will trigger system panic w/ testcase in 1: ------------ cut here ------------ kernel BUG at fs/f2fs/segment.c:2752! RIP: 0010:newcurseg+0xc81/0x2110 Call Trace:...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a contention condition issue when concurrently stopping garbage collection in the f2fs file system...