CVE-2026-93235

A flaw was found in the Flash-Friendly File System F2FS in the Linux kernel. When a file is extended across an unaligned End-of-File EOF boundary, the kernel fails to zero out data beyond the previous EOF before writing changes to disk. A local user can exploit this vulnerability by performing fi...

USN-9034-1: Linux kernel (AWS) vulnerabilities

Demi Marie Obenour and Simon Gaiser discovered that several Xen para- virtualization device frontends did not properly restrict the access rights of device backends. An attacker could possibly use a malicious Xen backend to gain access to memory pages of a guest VM or cause a denial of service in...

USN-9033-1: Linux kernel vulnerabilities

Demi Marie Obenour and Simon Gaiser discovered that several Xen para- virtualization device frontends did not properly restrict the access rights of device backends. An attacker could possibly use a malicious Xen backend to gain access to memory pages of a guest VM or cause a denial of service in...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: f2fs: bound iinlinexattrsize for non-inline-xattr inodes When the flexibleinlinexattr feature is enabled, doreadinode loads the on-disk iinlinexattrsize unconditionally: if f2fssbhasflexibleinlinexattrsbi fi-iinlinexattrsize =...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to migrate all curseg types during freesegmentrange Within freesegmentrange, the curseg evacuation loop only iterates up to NRCURSEGPERSISTTYPE 0..5, thereby missing non-persistent in-memory curseg types such as...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix UAF issue in f2fsmergepagebio As JY reported in bugzilla 1, Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 pc : 0xffffffe51d249484 f2fsiscpguaranteed+0x70/0x98 lr : 0xffffffe51d24ad...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: f2fs: validate inline dentry name lengths before conversion Inline dentry conversion copies names out of the inline dentry area before checking that each recorded name length fits in the available filename slots. A corrupted imag...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: f2fs: accurately adjust freesections during freesegmentrange In freesegmentrange, MAINSECSsbi is temporarily reduced by secs to restrict block allocation to the safe remaining main area; meanwhile, GC evicts any valid blocks with...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential deadloop in f2fsfsyncnodepages There is potential deadloop in the race condition: Thread A Thread B - fsync - f2fsdosyncfile - f2fsfsyncnodepages - lastfsyncdnode - foliogetlastfolio - f2fssetattr -...

CVE-2026-89838

A flaw was found in the Linux kernel's F2FS Flash-Friendly File System component. This vulnerability occurs during recovery filename logging when a filename of 255 bytes is processed. Due to improper handling of the filename buffer, which is not null-terminated, the system can read past the...

CVE-2026-89836

A flaw was found in the Linux kernel's f2fs Flash-Friendly File System component. A race condition occurs during the invalidation of large folios memory pages, where the system incorrectly determines the size of the memory range. This can happen if another process concurrently modifies or frees t...

CVE-2026-89832

A flaw was found in the f2fs filesystem within the Linux kernel. When a node block becomes corrupted due to a checksum mismatch or inconsistent footer information, the system fails to properly clear a 'dirty flag' on the associated folio a memory page. This can lead to inconsistent data being...

Ubuntu 20.04 LTS : Linux kernel (BlueField) vulnerabilities (USN-8965-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8965-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

USN-8965-1 linux-bluefield vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Ethernet bonding driver; - Network drivers; - SCSI subsystem; - F2FS file system; - Network file system NFS client;...

USN-8965-1: Linux kernel (BlueField) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Ethernet bonding driver; - Network drivers; - SCSI subsystem; - F2FS file system; - Network file system NFS client;...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix listxattr handling of corrupted xattr entries Validate the xattr entry before reading its fields in f2fslistxattr. Return -EFSCORRUPTED when the entry is outside the valid xattr storage area instead of returning a...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: f2fs: validate orphan inode entry count f2fsrecoverorphaninodes relies on the orphan block entrycount when replaying orphan inodes from the checkpoint pack. A corrupted entrycount greater than F2FSORPHANSPERBLOCK causes the...

CLEANSTART-2023-TL29079 Security fix for CVE-2021-6108 applied in: f2fs-tools 1.14.0-r0

Security vulnerability affects the f2fs-tools package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2023-JK64886 Security fix for CVE-2021-6107 applied in: f2fs-tools 1.14.0-r0

Security vulnerability affects the f2fs-tools package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2023-AM39654 Security fix for CVE-2021-6106 applied in: f2fs-tools 1.14.0-r0

Security vulnerability affects the f2fs-tools package. This issue is resolved in later releases. See references for vulnerability details...