In the Linux kernel, the following vulnerability has been resolved:
f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic
The decompress_io_ctx may be released asynchronously after I/O completion. If this file is deleted immediately after read, and the kworker of processing post_read_wq has not been executed yet due to high workloads, It is possible that the inode(f2fs_inode_info) is evicted and freed before it is used f2fs_free_dic.
The UAF case as below: Thread A Thread B - f2fs_decompress_end_io - f2fs_put_dic - queue_work add free_dic work to post_read_wq - do_unlink - iput - evict - call_rcu This file is deleted after read.
Thread C kworker to process post_read_wq - rcu_do_batch - f2fs_free_inode - kmem_cache_free inode is freed by rcu - process_scheduled_works - f2fs_late_free_dic - f2fs_free_dic - f2fs_release_decomp_mem read (dic->inode)->i_compress_algorithm
This patch store compress_algorithm and sbi in dic to avoid inode UAF.
In addition, the previous solution is deprecated in [1] may cause system hang. [1] https://lore.kernel.org/all/[email protected]
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 5, 2026 | Jul 5, 2026 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-6.8.0-1050-awsUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-aws-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-virtualUpgrade linux-image-gkeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-xilinxUpgrade linux-image-aws-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-oracleUpgrade linux-image-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-azure-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-genericUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-generic-6.8Upgrade linux-image-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-106-fipsUpgrade linux-image-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-ibm-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-raspiUpgrade linux-image-oracle-6.8Upgrade linux-image-gkeopUpgrade linux-image-gke-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-virtual-6.8 | Mar 17, 2026 | Aug 22, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 17, 2026 | Aug 22, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub