The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix to avoid use-after-free for cached IPU bio
xfstest generic/019 reports a bug:
kernel BUG at mm/filemap.c:1619! RIP: 0010:folio_end_writeback+0x8a/0x90 Call Trace: end_page_writeback+0x1c/0x60 f2fs_write_end_io+0x199/0x420 bio_endio+0x104/0x180 submit_bio_noacct+0xa5/0x510 submit_bio+0x48/0x80 f2fs_submit_write_bio+0x35/0x300 f2fs_submit_merged_ipu_write+0x2a0/0x2b0 f2fs_write_single_data_page+0x838/0x8b0 f2fs_write_cache_pages+0x379/0xa30 f2fs_write_data_pages+0x30c/0x340 do_writepages+0xd8/0x1b0 __writeback_single_inode+0x44/0x370 writeback_sb_inodes+0x233/0x4d0 __writeback_inodes_wb+0x56/0xf0 wb_writeback+0x1dd/0x2d0 wb_workfn+0x367/0x4a0 process_one_work+0x21d/0x430 worker_thread+0x4e/0x3c0 kthread+0x103/0x130 ret_from_fork+0x2c/0x50
The root cause is: after cp_error is set, f2fs_submit_merged_ipu_write() in f2fs_write_single_data_page() tries to flush IPU bio in cache, however f2fs_submit_merged_ipu_write() missed to check validity of @bio parameter, result in submitting random cached bio which belong to other IO context, then it will cause use-after-free issue, fix it by adding additional validity check.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Oct 6, 2025 | Oct 6, 2025 |
| Ubuntu | — | Upgrade linux-azure-5.15Upgrade linux-riscv-5.15Upgrade linux-ibm-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-nvidiaUpgrade linux-oracle-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-gcpUpgrade linuxUpgrade linux-oracleUpgrade linux-gkeopUpgrade linux-ibmUpgrade linux-xilinx-zynqmpUpgrade linux-azureUpgrade linux-aws-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-gkeUpgrade linux-realtimeUpgrade linux-intel-iotgUpgrade linux-azure-fdeUpgrade linux-lowlatencyUpgrade linux-kvmUpgrade linux-gcp-5.15Upgrade linux-bluefieldUpgrade linux-nvidia-tegraUpgrade linux-awsUpgrade linux-hwe-5.15Upgrade linux-raspi | Oct 10, 2025 | Oct 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Oct 4, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub