In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
There's issue as follows when concurrently installing the f2fs.ko module and mounting the f2fs file system: KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] RIP: 0010:__bio_alloc+0x2fb/0x6c0 [f2fs] Call Trace: <TASK> f2fs_submit_page_bio+0x126/0x8b0 [f2fs] __get_meta_page+0x1d4/0x920 [f2fs] get_checkpoint_version.constprop.0+0x2b/0x3c0 [f2fs] validate_checkpoint+0xac/0x290 [f2fs] f2fs_get_valid_checkpoint+0x207/0x950 [f2fs] f2fs_fill_super+0x1007/0x39b0 [f2fs] mount_bdev+0x183/0x250 legacy_get_tree+0xf4/0x1e0 vfs_get_tree+0x88/0x340 do_new_mount+0x283/0x5e0 path_mount+0x2b2/0x15b0 __x64_sys_mount+0x1fe/0x270 do_syscall_64+0x5f/0x170 entry_SYSCALL_64_after_hwframe+0x76/0x7e
Above issue happens as the biset of the f2fs file system is not initialized before register "f2fs_fs_type". To address above issue just register "f2fs_fs_type" at the last in init_f2fs_fs(). Ensure that all f2fs file system resources are initialized.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 15, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-fipsUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-5.15.0-1117-azureUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-186-genericUpgrade linux-image-awsUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-azure-fde-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-gcp-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-generic-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-aws-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-aws-fipsUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gkeUpgrade linux-image-azure-fipsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibm-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-realtimeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-generic-64k-5.15Upgrade linux-image-raspiUpgrade linux-image-azure-nvidiaUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-azureUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-gke-5.15Upgrade linux-image-intelUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-tegraUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-gcp-64kUpgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oracle-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-kvm-5.15Upgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-raspi-realtimeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-raspi-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-lowlatency-5.15Upgrade linux-image-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-realtime-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-genericUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-5.15.0-186-fipsUpgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-6.8 | Feb 20, 2025 | Dec 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 8, 2026 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub