In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix to avoid panic once fallocation fails for pinfile
syzbot reports a f2fs bug as below:
------------[ cut here ]------------ kernel BUG at fs/f2fs/segment.c:2746! CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 RIP: 0010:get_new_segment fs/f2fs/segment.c:2746 [inline] RIP: 0010:new_curseg+0x1f52/0x1f70 fs/f2fs/segment.c:2876 Call Trace: <TASK> __allocate_new_segment+0x1ce/0x940 fs/f2fs/segment.c:3210 f2fs_allocate_new_section fs/f2fs/segment.c:3224 [inline] f2fs_allocate_pinning_section+0xfa/0x4e0 fs/f2fs/segment.c:3238 f2fs_expand_inode_data+0x696/0xca0 fs/f2fs/file.c:1830 f2fs_fallocate+0x537/0xa10 fs/f2fs/file.c:1940 vfs_fallocate+0x569/0x6e0 fs/open.c:327 do_vfs_ioctl+0x258c/0x2e40 fs/ioctl.c:885 __do_sys_ioctl fs/ioctl.c:904 [inline] __se_sys_ioctl+0x80/0x170 fs/ioctl.c:892 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f
Concurrent pinfile allocation may run out of free section, result in panic in get_new_segment(), let's expand pin_sem lock coverage to include f2fs_gc(), so that we can make sure to reclaim enough free space for following allocation.
In addition, do below changes to enhance error path handling: - call f2fs_bug_on() only in non-pinfile allocation path in get_new_segment(). - call reset_curseg_fields() to reset all fields of curseg in new_curseg()
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Apr 16, 2025 |
| Ubuntu | — | Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-virtualUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-awsUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-oracleUpgrade linux-image-fipsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-azureUpgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-106-fipsUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-ibmUpgrade linux-image-oem-22.04cUpgrade linux-image-gcpUpgrade linux-image-genericUpgrade linux-image-xilinx-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidiaUpgrade linux-image-ibm-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-xilinxUpgrade linux-image-oracle-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gke-64kUpgrade linux-image-oracle-64kUpgrade linux-image-generic-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1050-awsUpgrade linux-image-gke-64k-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-virtual-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gke-6.8 | Jun 26, 2025 | Apr 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 17, 2026 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub