In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix to bail out in get_new_segment()
------------[ cut here ]------------ WARNING: CPU: 3 PID: 579 at fs/f2fs/segment.c:2832 new_curseg+0x5e8/0x6dc pc : new_curseg+0x5e8/0x6dc Call trace: new_curseg+0x5e8/0x6dc f2fs_allocate_data_block+0xa54/0xe28 do_write_page+0x6c/0x194 f2fs_do_write_node_page+0x38/0x78 __write_node_page+0x248/0x6d4 f2fs_sync_node_pages+0x524/0x72c f2fs_write_checkpoint+0x4bc/0x9b0 __checkpoint_and_complete_reqs+0x80/0x244 issue_checkpoint_thread+0x8c/0xec kthread+0x114/0x1bc ret_from_fork+0x10/0x20
get_new_segment() detects inconsistent status in between free_segmap and free_secmap, let's record such error into super block, and bail out get_new_segment() instead of continue using the segment.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 11, 2025 | Jul 11, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-gcpUpgrade linux-image-xilinxUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-gkeUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-azure-nvidia-6.14Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-6.14Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-aws-64kUpgrade linux-image-genericUpgrade linux-image-gkeopUpgrade linux-image-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-lowlatencyUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-virtual-6.14Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-6.14.0-1015-awsUpgrade linux-image-oem-24.04Upgrade linux-image-realtimeUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-fips-6.8Upgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-oem-24.04bUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-aws-fips-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-aws-64k-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.14.0-1014-oemUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-fipsUpgrade linux-image-gcp-6.14Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-oem-22.04dUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-realtime-6.8.1Upgrade linux-image-raspiUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-virtual-6.8Upgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-realtime-6.14Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.14.0-1014-azureUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-azureUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.14.0-34-genericUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gke-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gke-64k-6.8Upgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-awsUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-raspi-6.14Upgrade linux-image-gke-6.8 | Jul 14, 2025 | Jul 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub