In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix to bail out in get_new_segment()
------------[ cut here ]------------ WARNING: CPU: 3 PID: 579 at fs/f2fs/segment.c:2832 new_curseg+0x5e8/0x6dc pc : new_curseg+0x5e8/0x6dc Call trace: new_curseg+0x5e8/0x6dc f2fs_allocate_data_block+0xa54/0xe28 do_write_page+0x6c/0x194 f2fs_do_write_node_page+0x38/0x78 __write_node_page+0x248/0x6d4 f2fs_sync_node_pages+0x524/0x72c f2fs_write_checkpoint+0x4bc/0x9b0 __checkpoint_and_complete_reqs+0x80/0x244 issue_checkpoint_thread+0x8c/0xec kthread+0x114/0x1bc ret_from_fork+0x10/0x20
get_new_segment() detects inconsistent status in between free_segmap and free_secmap, let's record such error into super block, and bail out get_new_segment() instead of continue using the segment.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxNo solution exists | Jul 11, 2025 | Jul 11, 2025 |
| Ubuntu | — | Upgrade linux-image-aws-fipsUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-1014-oemUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-gke-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-raspi-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-awsUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-lowlatency-64kUpgrade linux-image-aws-6.8Upgrade linux-image-gke-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-oracle-6.8Upgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-gcp-fipsUpgrade linux-image-generic-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-raspiUpgrade linux-image-gcp-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-6.14Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-fipsUpgrade linux-image-gke-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-azureUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.14.0-1014-azureUpgrade linux-image-6.14.0-34-genericUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-ibmUpgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-generic-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-lpaeUpgrade linux-image-xilinxUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-azure-nvidia-6.14Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-virtualUpgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-oem-24.04aUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcpUpgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-oem-24.04cUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-azure-6.8Upgrade linux-image-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-oem-6.14Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-fips-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-6.14.0-1015-awsUpgrade linux-image-aws-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-nvidia-64k-6.8 | Jul 14, 2025 | Jul 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub