In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix to don't panic system for no free segment fault injection
f2fs: fix to don't panic system for no free segment fault injection
syzbot reports a f2fs bug as below:
F2FS-fs (loop0): inject no free segment in get_new_segment of __allocate_new_segment+0x1ce/0x940 fs/f2fs/segment.c:3167 F2FS-fs (loop0): Stopped filesystem due to reason: 7 ------------[ cut here ]------------ kernel BUG at fs/f2fs/segment.c:2748! CPU: 0 UID: 0 PID: 5109 Comm: syz-executor304 Not tainted 6.11.0-rc6-syzkaller-00363-g89f5e14d05b4 #0 RIP: 0010:get_new_segment fs/f2fs/segment.c:2748 [inline] RIP: 0010:new_curseg+0x1f61/0x1f70 fs/f2fs/segment.c:2836 Call Trace: __allocate_new_segment+0x1ce/0x940 fs/f2fs/segment.c:3167 f2fs_allocate_new_section fs/f2fs/segment.c:3181 [inline] f2fs_allocate_pinning_section+0xfa/0x4e0 fs/f2fs/segment.c:3195 f2fs_expand_inode_data+0x5d6/0xbb0 fs/f2fs/file.c:1799 f2fs_fallocate+0x448/0x960 fs/f2fs/file.c:1903 vfs_fallocate+0x553/0x6c0 fs/open.c:334 do_vfs_ioctl+0x2592/0x2e50 fs/ioctl.c:886 __do_sys_ioctl fs/ioctl.c:905 [inline] __se_sys_ioctl+0x81/0x170 fs/ioctl.c:893 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0010:get_new_segment fs/f2fs/segment.c:2748 [inline] RIP: 0010:new_curseg+0x1f61/0x1f70 fs/f2fs/segment.c:2836
The root cause is when we inject no free segment fault into f2fs, we should not panic system, fix it.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1031-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-64-genericUpgrade linux-image-6.8.0-1031-oemUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-raspiUpgrade linux-image-6.8.0-64-lowlatency-64kUpgrade linux-image-6.8.0-1031-nvidia-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-64-lowlatencyUpgrade linux-image-6.8.0-1031-raspiUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-6.8Upgrade linux-image-gkeUpgrade linux-image-azureUpgrade linux-image-6.8.0-1033-gcp-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-6.8.0-1028-gkeUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1029-oracle-64kUpgrade linux-image-genericUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.8.0-1029-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1015-gkeopUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-2026-raspi-realtimeUpgrade linux-image-azure-fde-6.8Upgrade linux-image-awsUpgrade linux-image-6.8.0-1032-awsUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1033-gcpUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1034-azureUpgrade linux-image-azure-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1031-nvidiaUpgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-generic-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.1-1025-realtimeUpgrade linux-image-oem-6.8Upgrade linux-image-gcpUpgrade linux-image-aws-64kUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1029-ibmUpgrade linux-image-6.8.0-1032-aws-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1031-nvidia-64kUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-oem-22.04c | Feb 20, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub