In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode
w/ "mode=lfs" mount option, generic/299 will cause system panic as below:
------------[ cut here ]------------ kernel BUG at fs/f2fs/segment.c:2835! Call Trace: <TASK> f2fs_allocate_data_block+0x6f4/0xc50 f2fs_map_blocks+0x970/0x1550 f2fs_iomap_begin+0xb2/0x1e0 iomap_iter+0x1d6/0x430 __iomap_dio_rw+0x208/0x9a0 f2fs_file_write_iter+0x6b3/0xfa0 aio_write+0x15d/0x2e0 io_submit_one+0x55e/0xab0 __x64_sys_io_submit+0xa5/0x230 do_syscall_64+0x84/0x2f0 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0010:new_curseg+0x70f/0x720
The root cause of we run out-of-space is: in f2fs_map_blocks(), f2fs may trigger foreground gc only if it allocates any physical block, it will be a little bit later when there is multiple threads writing data w/ aio/dio/bufio method in parallel, since we always use OPU in lfs mode, so f2fs_map_blocks() does block allocations aggressively.
In order to fix this issue, let's give a chance to trigger foreground gc in prior to block allocation in f2fs_map_blocks().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 3, 2026 | May 3, 2026 |
| Ubuntu | — | Upgrade linux-image-5.15.0-186-fipsUpgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-24.04aUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.14.0-1017-awsUpgrade linux-image-kvm-5.15Upgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-oem-20.04Upgrade linux-image-xilinxUpgrade linux-image-lowlatency-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-ibm-5.15Upgrade linux-image-azure-fips-6.8Upgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-gkeUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-realtime-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-virtualUpgrade linux-image-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-genericUpgrade linux-image-nvidiaUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-azure-fips-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-virtual-6.14Upgrade linux-image-intel-iotgUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gcp-6.14Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-raspi-6.14Upgrade linux-image-realtimeUpgrade linux-image-nvidia-tegraUpgrade linux-image-aws-64kUpgrade linux-image-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-azure-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-intelUpgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-ibmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-oem-6.14Upgrade linux-image-generic-64k-5.15Upgrade linux-image-generic-6.14Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-aws-6.14Upgrade linux-image-gcp-fipsUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-raspiUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oracle-5.15Upgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-5.15.0-1117-azureUpgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-raspi-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-azure-fde-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-fips-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-5.15Upgrade linux-image-azureUpgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-awsUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-gke-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-virtual-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-lowlatency-6.8 | Nov 25, 2025 | Nov 21, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Aug 22, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub