In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix to avoid panic in f2fs_evict_inode
As syzbot [1] reported as below:
R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffe17473450 R13: 00007f28b1c10854 R14: 000000000000dae5 R15: 00007ffe17474520 </TASK> ---[ end trace 0000000000000000 ]--- ================================================================== BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 lib/list_debug.c:62 Read of size 8 at addr ffff88812d962278 by task syz-executor/564
CPU: 1 PID: 564 Comm: syz-executor Tainted: G W 6.1.129-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Call Trace: <TASK> __dump_stack+0x21/0x24 lib/dump_stack.c:88 dump_stack_lvl+0xee/0x158 lib/dump_stack.c:106 print_address_description+0x71/0x210 mm/kasan/report.c:316 print_report+0x4a/0x60 mm/kasan/report.c:427 kasan_report+0x122/0x150 mm/kasan/report.c:531 __asan_report_load8_noabort+0x14/0x20 mm/kasan/report_generic.c:351 __list_del_entry_valid+0xa6/0x130 lib/list_debug.c:62 __list_del_entry include/linux/list.h:134 [inline] list_del_init include/linux/list.h:206 [inline] f2fs_inode_synced+0xf7/0x2e0 fs/f2fs/super.c:1531 f2fs_update_inode+0x74/0x1c40 fs/f2fs/inode.c:585 f2fs_update_inode_page+0x137/0x170 fs/f2fs/inode.c:703 f2fs_write_inode+0x4ec/0x770 fs/f2fs/inode.c:731 write_inode fs/fs-writeback.c:1460 [inline] __writeback_single_inode+0x4a0/0xab0 fs/fs-writeback.c:1677 writeback_single_inode+0x221/0x8b0 fs/fs-writeback.c:1733 sync_inode_metadata+0xb6/0x110 fs/fs-writeback.c:2789 f2fs_sync_inode_meta+0x16d/0x2a0 fs/f2fs/checkpoint.c:1159 block_operations fs/f2fs/checkpoint.c:1269 [inline] f2fs_write_checkpoint+0xca3/0x2100 fs/f2fs/checkpoint.c:1658 kill_f2fs_super+0x231/0x390 fs/f2fs/super.c:4668 deactivate_locked_super+0x98/0x100 fs/super.c:332 deactivate_super+0xaf/0xe0 fs/super.c:363 cleanup_mnt+0x45f/0x4e0 fs/namespace.c:1186 __cleanup_mnt+0x19/0x20 fs/namespace.c:1193 task_work_run+0x1c6/0x230 kernel/task_work.c:203 exit_task_work include/linux/task_work.h:39 [inline] do_exit+0x9fb/0x2410 kernel/exit.c:871 do_group_exit+0x210/0x2d0 kernel/exit.c:1021 __do_sys_exit_group kernel/exit.c:1032 [inline] __se_sys_exit_group kernel/exit.c:1030 [inline] __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1030 x64_sys_call+0x7b4/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:232 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:81 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f28b1b8e169 Code: Unable to access opcode bytes at 0x7f28b1b8e13f. RSP: 002b:00007ffe174710a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 00007f28b1c10879 RCX: 00007f28b1b8e169 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 RBP: 0000000000000002 R08: 00007ffe1746ee47 R09: 00007ffe17472360 R10: 0000000000000009 R11: 0000000000000246 R12: 00007ffe17472360 R13: 00007f28b1c10854 R14: 000000000000dae5 R15: 00007ffe17474520 </TASK>
Allocated by task 569: kasan_save_stack mm/kasan/common.c:45 [inline] kasan_set_track+0x4b/0x70 mm/kasan/common.c:52 kasan_save_alloc_info+0x25/0x30 mm/kasan/generic.c:505 __kasan_slab_alloc+0x72/0x80 mm/kasan/common.c:328 kasan_slab_alloc include/linux/kasan.h:201 [inline] slab_post_alloc_hook+0x4f/0x2c0 mm/slab.h:737 slab_alloc_node mm/slub.c:3398 [inline] slab_alloc mm/slub.c:3406 [inline] __kmem_cache_alloc_lru mm/slub.c:3413 [inline] kmem_cache_alloc_lru+0x104/0x220 mm/slub.c:3429 alloc_inode_sb include/linux/fs.h:3245 [inline] f2fs_alloc_inode+0x2d/0x340 fs/f2fs/super.c:1419 alloc_inode fs/inode.c:261 [inline] iget_locked+0x186/0x880 fs/inode.c:1373 f2fs_iget+0x55/0x4c60 fs/f2fs/inode.c:483 f2fs_lookup+0x366/0xab0 fs/f2fs/namei.c:487 __lookup_slow+0x2a3/0x3d0 fs/namei.c:1690 lookup_slow+0x57/0x70 fs/namei.c:1707 walk_component+0x2e6/0x410 fs/namei ---truncated---
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 8, 2025 | Sep 8, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 14, 2025 | Aug 19, 2025 |
| Ubuntu | — | Upgrade linux-image-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-gcp-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-generic-6.14Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-ibm-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-realtime-6.8.1Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracle-6.14Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-realtime-6.14Upgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-lowlatency-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-oem-22.04aUpgrade linux-image-aws-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-raspiUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-generic-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-aws-6.14Upgrade linux-image-aws-fips-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-raspi-6.14Upgrade linux-image-virtual-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.14.0-1016-oemUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-6.8Upgrade linux-image-azureUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-generic-64k-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-raspi-5.15Upgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gke-64kUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-ibmUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-5.15.0-1102-azureUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-realtime-5.15Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-6.14Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-intelUpgrade linux-image-realtimeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-virtualUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-aws-64kUpgrade linux-image-fips-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-6.14Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-ibm-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-fips-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-6.14.0-36-genericUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-xilinxUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-gkeopUpgrade linux-image-generic-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-gkeUpgrade linux-image-gke-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-genericUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-kvm-5.15Upgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-azure-fips-5.15Upgrade linux-image-generic-64k-6.14Upgrade linux-image-oracleUpgrade linux-image-nvidia-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-5.15.0-1097-aws-fips | Nov 25, 2025 | Nov 21, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Aug 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub