by Kastro
Paper/Archive/CVE-2025-68315

CVE-2025-68315

Linux Linux — f2fs: fix to detect potential corrupted nid in free_nid_list

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
37
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 37.3.373 × 207.5No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to detect potential corrupted nid in free_nid_list As reported, on-disk footer.ino and footer.nid is the same and out-of-range, let's add sanity check on f2fs_alloc_nid() to detect any potential corruption in free_nid_list.

Affected

ProductAffectedFixed inSource
Linux98e4da8ca301e062d79ae168c67e56f3c3de3ce4 – < 88b2ddb0c4f1dc874d4598e78cc830c64315ed8688b2ddb0c4f1dc874d4598e78cc830c64315ed86CNA
Linux98e4da8ca301e062d79ae168c67e56f3c3de3ce4 – < 9337ed5e777e1c19854928cba7a8131dd00e611b9337ed5e777e1c19854928cba7a8131dd00e611bCNA
Linux98e4da8ca301e062d79ae168c67e56f3c3de3ce4 – < 6b9525596a83cd5b7bbc2c7bd5f9ad9cf5ad60fa6b9525596a83cd5b7bbc2c7bd5f9ad9cf5ad60faCNA
Linux98e4da8ca301e062d79ae168c67e56f3c3de3ce4 – < adbcb34f03abb89e681a5907c4c3ce4bf224991dadbcb34f03abb89e681a5907c4c3ce4bf224991dCNA
Linux98e4da8ca301e062d79ae168c67e56f3c3de3ce4 – < 8fc6056dcf79937c46c97fa4996cda65956437a98fc6056dcf79937c46c97fa4996cda65956437a9CNA
Linux3.8–CNA

Scores by source

Linux (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refgit.kernel.org/stable/c/88b2ddb0c4f1dc874d4598e78cc830c64315ed86refgit.kernel.org/stable/c/9337ed5e777e1c19854928cba7a8131dd00e611brefgit.kernel.org/stable/c/6b9525596a83cd5b7bbc2c7bd5f9ad9cf5ad60farefgit.kernel.org/stable/c/adbcb34f03abb89e681a5907c4c3ce4bf224991drefgit.kernel.org/stable/c/8fc6056dcf79937c46c97fa4996cda65956437a9