f2fs: fix to do sanity check on ino and xnid

...

f2fs: fix to do sanity check on sit_bitmap_size

...

Linux Distros Unpatched Vulnerability : CVE-2025-38347

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - f2fs: fix to do sanity check on ino and xnid syzbot reported a f2fs bug as below: INFO: task syz- executor140:5308 blocked for more than 143 seconds. Not tainte...

PT-2025-35350

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's f2fs implementation related to out-of-boundary access in dnode pages. The issue stems from a corrupted image where a dnode shares a node ID with its...

AZL-72838 CVE-2025-38347 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on ino and xnid syzbot reported a f2fs bug as below: INFO: task syz-executor140:5308 blocked for more than 143 seconds. Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 0 "echo 0...

AZL-64889 CVE-2025-38333 affecting package kernel 6.6.126.1-1

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to bail out in getnewsegment ------------ cut here ------------ WARNING: CPU: 3 PID: 579 at fs/f2fs/segment.c:2832 newcurseg+0x5e8/0x6dc pc : newcurseg+0x5e8/0x6dc Call trace: newcurseg+0x5e8/0x6dc...

DEBIAN-CVE-2025-38218

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on sitbitmapsize w/ below testcase, resize will generate a corrupted image which contains inconsistent metadata, so when mounting such image, it will trigger kernel panic: touch img truncate -s...

UBUNTU-CVE-2025-38218

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on sitbitmapsize w/ below testcase, resize will generate a corrupted image which contains inconsistent metadata, so when mounting such image, it will trigger kernel panic: touch img truncate -s...

UBUNTU-CVE-2025-38219

In the Linux kernel, the following vulnerability has been resolved: f2fs: prevent kernel warning due to negative inlink from corrupted image WARNING: CPU: 1 PID: 9426 at fs/inode.c:417 dropnlink+0xac/0xd0 home/cc/linux/fs/inode.c:417 Modules linked in: CPU: 1 UID: 0 PID: 9426 Comm: syz-executor56...

The vulnerability of the f2fs component of the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the f2fs component of the Linux operating system’s kernel is related to improper error handling. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the f2fs component of the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the f2fs component of the Linux operating system’s kernel relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE CVE-2025-37739

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid out-of-bounds access in f2fstruncateinodeblocks syzbot reports an UBSAN issue as below: ------------ cut here ------------ UBSAN: array-index-out-of-bounds in fs/f2fs/node.h:381:10 index 18446744073709550692 is...

The vulnerability of the f2fs_setattr() function in the fs/f2fs/file.c module of the F2FS file system support in Linux operating systems allows a attacker to compromise the integrity of protected information.

The vulnerability of the f2fssetattr function in the fs/f2fs/file.c module of the F2FS file system support in Linux operating systems is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability allows a remote attacker to compromise the integrity of...

UBUNTU-CVE-2022-49738

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on iextraisize in isalive syzbot found a f2fs bug: BUG: KASAN: slab-out-of-bounds in datablkaddr fs/f2fs/f2fs.h:2891 inline BUG: KASAN: slab-out-of-bounds in isalive fs/f2fs/gc.c:1117 inline BUG: KASA...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from f2fs not initializing locks in a timely manner...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from f2fs not performing integrity checks on iextraisize...

The vulnerability of the __submit_discard_cmd() function in the file system of the F2FS kernel in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the submitdiscardcmd function in the file system of F2FS in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the is_end_zone_blkaddr() function in the fs/f2fs/data.c file of the F2FS kernel of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the isendzoneblkaddr function in the fs/f2fs/data.c file of the F2FS file system in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

jffs2: Prevent rtime decompress memory corruption

...

SUSE CVE-2022-49380

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid f2fsbugon in decvalidnodecount As Yanming reported in bugzilla: https://bugzilla.kernel.org/showbug.cgi?id=215897 I have encountered a bug in F2FS file system in kernel v5.17. The kernel should enable...