In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix to do sanity check on ino and xnid
syzbot reported a f2fs bug as below:
INFO: task syz-executor140:5308 blocked for more than 143 seconds. Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor140 state:D stack:24016 pid:5308 tgid:5308 ppid:5306 task_flags:0x400140 flags:0x00000006 Call Trace: <TASK> context_switch kernel/sched/core.c:5378 [inline] __schedule+0x190e/0x4c90 kernel/sched/core.c:6765 __schedule_loop kernel/sched/core.c:6842 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6857 io_schedule+0x8d/0x110 kernel/sched/core.c:7690 folio_wait_bit_common+0x839/0xee0 mm/filemap.c:1317 __folio_lock mm/filemap.c:1664 [inline] folio_lock include/linux/pagemap.h:1163 [inline] __filemap_get_folio+0x147/0xb40 mm/filemap.c:1917 pagecache_get_page+0x2c/0x130 mm/folio-compat.c:87 find_get_page_flags include/linux/pagemap.h:842 [inline] f2fs_grab_cache_page+0x2b/0x320 fs/f2fs/f2fs.h:2776 __get_node_page+0x131/0x11b0 fs/f2fs/node.c:1463 read_xattr_block+0xfb/0x190 fs/f2fs/xattr.c:306 lookup_all_xattrs fs/f2fs/xattr.c:355 [inline] f2fs_getxattr+0x676/0xf70 fs/f2fs/xattr.c:533 __f2fs_get_acl+0x52/0x870 fs/f2fs/acl.c:179 f2fs_acl_create fs/f2fs/acl.c:375 [inline] f2fs_init_acl+0xd7/0x9b0 fs/f2fs/acl.c:418 f2fs_init_inode_metadata+0xa0f/0x1050 fs/f2fs/dir.c:539 f2fs_add_inline_entry+0x448/0x860 fs/f2fs/inline.c:666 f2fs_add_dentry+0xba/0x1e0 fs/f2fs/dir.c:765 f2fs_do_add_link+0x28c/0x3a0 fs/f2fs/dir.c:808 f2fs_add_link fs/f2fs/f2fs.h:3616 [inline] f2fs_mknod+0x2e8/0x5b0 fs/f2fs/namei.c:766 vfs_mknod+0x36d/0x3b0 fs/namei.c:4191 unix_bind_bsd net/unix/af_unix.c:1286 [inline] unix_bind+0x563/0xe30 net/unix/af_unix.c:1379 __sys_bind_socket net/socket.c:1817 [inline] __sys_bind+0x1e4/0x290 net/socket.c:1848 __do_sys_bind net/socket.c:1853 [inline] __se_sys_bind net/socket.c:1851 [inline] __x64_sys_bind+0x7a/0x90 net/socket.c:1851 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f
Let's dump and check metadata of corrupted inode, it shows its xattr_nid is the same to its i_ino.
dump.f2fs -i 3 chaseyu.img.raw i_xattr_nid [0x 3 : 3]
So that, during mknod in the corrupted directory, it tries to get and lock inode page twice, result in deadlock.
- f2fs_mknod - f2fs_add_inline_entry - f2fs_get_inode_page --- lock dir's inode page - f2fs_init_acl - f2fs_acl_create(dir,..) - __f2fs_get_acl - f2fs_getxattr - lookup_all_xattrs - __get_node_page --- try to lock dir's inode page
In order to fix this, let's add sanity check on ino and xnid.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 11, 2025 | Jul 11, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 14, 2025 | Jul 10, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-azure-fipsUpgrade linux-image-oem-20.04Upgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-generic-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-ibm-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-azure-nvidia-6.14Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-oem-6.14Upgrade linux-image-aws-fipsUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-aws-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-azure-cvmUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-generic-64k-6.14Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-lowlatency-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-awsUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oem-24.04cUpgrade linux-image-lowlatency-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.14.0-1014-azureUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-fips-5.15Upgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-generic-5.15Upgrade linux-image-kvmUpgrade linux-image-realtime-6.8.1Upgrade linux-image-realtime-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-azure-nvidiaUpgrade linux-image-azureUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04dUpgrade linux-image-virtual-6.8Upgrade linux-image-gkeopUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.14.0-1014-oemUpgrade linux-image-xilinx-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-gcp-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-virtual-6.14Upgrade linux-image-raspi-realtimeUpgrade linux-image-oem-22.04Upgrade linux-image-gke-64kUpgrade linux-image-generic-64k-5.15Upgrade linux-image-6.14.0-34-genericUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-raspi-6.14Upgrade linux-image-5.15.0-1102-azureUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-raspiUpgrade linux-image-raspi-5.15Upgrade linux-image-6.14.0-1015-awsUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-gke-64k-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-generic-64kUpgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-xilinxUpgrade linux-image-realtime-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-aws-fips-5.15Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-generic-6.14Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-raspi-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-intelUpgrade linux-image-gcp-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-genericUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-azure-fips-6.8 | Jul 14, 2025 | Jul 10, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Jul 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub