CVE-2026-80591

A flaw was found in the f2fs file system within the Linux kernel. This vulnerability arises from inadequate validation of extended attribute xattr entries during the f2fslistxattr function's operation. A local attacker could potentially create a corrupted xattr entry, causing the system to attemp...

Linux Distros Unpatched Vulnerability : CVE-2026-80591

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - f2fs: fix listxattr handling of corrupted xattr entries Validate the xattr entry before reading its fields in f2fslistxattr. Return -EFSCORRUPTED when the entry...

SUSE CVE-2026-80591

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix listxattr handling of corrupted xattr entries Validate the xattr entry before reading its fields in f2fslistxattr. Return -EFSCORRUPTED when the entry is outside the valid xattr storage area instead of returning a...

CVE-2026-80591

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix listxattr handling of corrupted xattr entries Validate the xattr entry before reading its fields in f2fslistxattr. Return -EFSCORRUPTED when the entry is outside the valid xattr storage area instead of returning a...

UBUNTU-CVE-2026-80591

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix listxattr handling of corrupted xattr entries Validate the xattr entry before reading its fields in f2fslistxattr. Return -EFSCORRUPTED when the entry is outside the valid xattr storage area instead of returning a...

CVE-2026-80591

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix listxattr handling of corrupted xattr entries Validate the xattr entry before reading its fields in f2fslistxattr. Return -EFSCORRUPTED when the entry is outside the valid xattr storage area instead of returning a...

CVE-2026-80591

This vulnerability affects the f2fs filesystem in the Linux kernel . The flaw resides in f2fs_listxattr(), which fails to validate xattr entries before reading their fields. When a corrupted entry lies outside the valid xattr storage area, the function returns a successful partial result instead ...

CVE-2026-80591

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix listxattr handling of corrupted xattr entries Validate the xattr entry before reading its fields in f2fslistxattr. Return -EFSCORRUPTED when the entry is outside the valid xattr storage area instead of returning a...

CVE-2026-80591 f2fs: fix listxattr handling of corrupted xattr entries

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix listxattr handling of corrupted xattr entries Validate the xattr entry before reading its fields in f2fslistxattr. Return -EFSCORRUPTED when the entry is outside the valid xattr storage area instead of returning a...

CVE-2026-80591 f2fs: fix listxattr handling of corrupted xattr entries

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix listxattr handling of corrupted xattr entries Validate the xattr entry before reading its fields in f2fslistxattr. Return -EFSCORRUPTED when the entry is outside the valid xattr storage area instead of returning a...

EUVD-2026-67467

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix listxattr handling of corrupted xattr entries Validate the xattr entry before reading its fields in f2fslistxattr. Return -EFSCORRUPTED when the entry is outside the valid xattr storage area instead of returning a...

PT-2026-82891

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the f2fs file system where corrupted xattr entries are not properly handled. The f2fs listxattr function fails to validate the xattr entry before reading its fields,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: f2fs-tools (UTSA-2026-093564)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093564 advisory. An exploitable information disclosure vulnerability exists in the initnodemanager functionality of F2fs- Tools F2fs.Fsck 1.12 and 1.13. A specially crafted filesyste...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: f2fs-tools (UTSA-2026-093586)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093586 advisory. An exploitable information disclosure vulnerability exists in the getdnodeofdata functionality of F2fs- Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: f2fs-tools (UTSA-2026-093563)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093563 advisory. An exploitable code execution vulnerability exists in the multiple devices functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: f2fs-tools (UTSA-2026-093571)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093571 advisory. An exploitable code execution vulnerability exists in the fsckchkorphannode functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: f2fs-tools (UTSA-2026-093579)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093579 advisory. An exploitable information disclosure vulnerability exists in the devread functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause a...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: f2fs: fixed to avoid dirent corruption As Al reported in link 1: f2fsrename … if olddir != newdir && !whiteout f2fssetlinkoldinode, olddirentry, olddirpage, newdir; else f2fsputpageolddirpage, 0; You need the correct inumber i...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: f2fs: Fix to perform sanity checks on iextraisize in isalive syzbot identified a bug in f2fs: BUG: KASAN: Out-of-bounds access to slab data in datablkaddr, fs/f2fs/f2fs.h:2891 inline BUG: KASAN: Out-of-bounds access to slab da...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fixed the issue to cover normal cluster writes using cprwsem. When we overwrite a compressed cluster with a normal cluster, we should not unlock cprwsem during f2fswriterawpages. Otherwise, data will be corrupted ...