In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix to avoid panic once fallocation fails for pinfile
syzbot reports a f2fs bug as below:
------------[ cut here ]------------ kernel BUG at fs/f2fs/segment.c:2746! CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 RIP: 0010:get_new_segment fs/f2fs/segment.c:2746 [inline] RIP: 0010:new_curseg+0x1f52/0x1f70 fs/f2fs/segment.c:2876 Call Trace: <TASK> __allocate_new_segment+0x1ce/0x940 fs/f2fs/segment.c:3210 f2fs_allocate_new_section fs/f2fs/segment.c:3224 [inline] f2fs_allocate_pinning_section+0xfa/0x4e0 fs/f2fs/segment.c:3238 f2fs_expand_inode_data+0x696/0xca0 fs/f2fs/file.c:1830 f2fs_fallocate+0x537/0xa10 fs/f2fs/file.c:1940 vfs_fallocate+0x569/0x6e0 fs/open.c:327 do_vfs_ioctl+0x258c/0x2e40 fs/ioctl.c:885 __do_sys_ioctl fs/ioctl.c:904 [inline] __se_sys_ioctl+0x80/0x170 fs/ioctl.c:892 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f
Concurrent pinfile allocation may run out of free section, result in panic in get_new_segment(), let's expand pin_sem lock coverage to include f2fs_gc(), so that we can make sure to reclaim enough free space for following allocation.
In addition, do below changes to enhance error path handling: - call f2fs_bug_on() only in non-pinfile allocation path in get_new_segment(). - call reset_curseg_fields() to reset all fields of curseg in new_curseg()
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | Apr 16, 2025 |
| Ubuntu | — | Upgrade linux-image-xilinx-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-genericUpgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-xilinxUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-virtual-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-gke-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-generic-6.8Upgrade linux-image-azureUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1050-awsUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.8.0-106-fipsUpgrade linux-image-oem-22.04cUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-fips-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-fipsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-nvidiaUpgrade linux-image-oem-22.04Upgrade linux-image-gkeopUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-gcp-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-oem-22.04bUpgrade linux-image-aws-64kUpgrade linux-image-azure-fipsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-kvmUpgrade linux-image-fipsUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-6.14.0-1007-raspi | Jun 26, 2025 | Apr 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 17, 2026 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub