In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix to avoid updating compression context during writeback
Bai, Shuangpeng <[email protected]> reported a bug as below:
Oops: divide error: 0000 [#1] SMP KASAN PTI CPU: 0 UID: 0 PID: 11441 Comm: syz.0.46 Not tainted 6.17.0 #1 PREEMPT(full) Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014 RIP: 0010:f2fs_all_cluster_page_ready+0x106/0x550 fs/f2fs/compress.c:857 Call Trace: <TASK> f2fs_write_cache_pages fs/f2fs/data.c:3078 [inline] __f2fs_write_data_pages fs/f2fs/data.c:3290 [inline] f2fs_write_data_pages+0x1c19/0x3600 fs/f2fs/data.c:3317 do_writepages+0x38e/0x640 mm/page-writeback.c:2634 filemap_fdatawrite_wbc mm/filemap.c:386 [inline] __filemap_fdatawrite_range mm/filemap.c:419 [inline] file_write_and_wait_range+0x2ba/0x3e0 mm/filemap.c:794 f2fs_do_sync_file+0x6e6/0x1b00 fs/f2fs/file.c:294 generic_write_sync include/linux/fs.h:3043 [inline] f2fs_file_write_iter+0x76e/0x2700 fs/f2fs/file.c:5259 new_sync_write fs/read_write.c:593 [inline] vfs_write+0x7e9/0xe00 fs/read_write.c:686 ksys_write+0x19d/0x2d0 fs/read_write.c:738 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xf7/0x470 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f
The bug was triggered w/ below race condition:
fsync setattr ioctl - f2fs_do_sync_file - file_write_and_wait_range - f2fs_write_cache_pages : inode is non-compressed : cc.cluster_size = F2FS_I(inode)->i_cluster_size = 0 - tag_pages_for_writeback - f2fs_setattr - truncate_setsize - f2fs_truncate - f2fs_fileattr_set - f2fs_setflags_common - set_compress_context : F2FS_I(inode)->i_cluster_size = 4 : set_inode_flag(inode, FI_COMPRESSED_FILE) - f2fs_compressed_file : return true - f2fs_all_cluster_page_ready : "pgidx % cc->cluster_size" trigger dividing 0 issue
Let's change as below to fix this issue: - introduce a new atomic type variable .writeback in structure f2fs_inode_info to track the number of threads which calling f2fs_write_cache_pages(). - use .i_sem lock to protect .writeback update. - check .writeback before update compression context in f2fs_setflags_common() to avoid race w/ ->writepages.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Feb 11, 2026 | Feb 11, 2026 |
| Ubuntu | — | Upgrade linux-image-6.8.0-2042-raspi-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-generic-64k-6.17Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1054-azure-fipsUpgrade linux-image-azureUpgrade linux-image-generic-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-gke-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1051-nvidia-lowlatencyUpgrade linux-image-6.17.0-22-genericUpgrade linux-image-6.8.0-110-lowlatencyUpgrade linux-image-6.8.0-1051-nvidia-lowlatency-64kUpgrade linux-image-aws-6.8Upgrade linux-image-oracle-64k-6.17Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.17.0-1012-awsUpgrade linux-image-6.8.0-1037-gkeopUpgrade linux-image-azure-fipsUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1050-gke-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-awsUpgrade linux-image-xilinxUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.1-1047-realtimeUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1052-aws-64kUpgrade linux-image-6.8.0-1054-azureUpgrade linux-image-fips-6.8Upgrade linux-image-6.17.0-1011-oracleUpgrade linux-image-gcp-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.17.0-1014-raspiUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1050-gkeUpgrade linux-image-aws-64k-6.17Upgrade linux-image-ibmUpgrade linux-image-azure-6.17Upgrade linux-image-gcp-fipsUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.17.0-1013-azureUpgrade linux-image-raspi-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-6.17Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-aws-fips-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-6.17Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1022-nvidia-tegraUpgrade linux-image-raspi-6.17Upgrade linux-image-generic-lpaeUpgrade linux-image-ibm-6.8Upgrade linux-image-gcp-64k-6.17Upgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-110-genericUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1049-oracleUpgrade linux-image-6.8.0-1052-aws-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.17.0-22-generic-64kUpgrade linux-image-oem-6.17Upgrade linux-image-6.17.0-1012-aws-64kUpgrade linux-image-genericUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-fipsUpgrade linux-image-aws-64kUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-110-fipsUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1051-nvidia-64kUpgrade linux-image-oem-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1022-nvidia-tegra-rtUpgrade linux-image-6.8.0-1051-nvidiaUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1059-azureUpgrade linux-image-6.8.0-1054-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-virtualUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-110-generic-64kUpgrade linux-image-6.8.0-1049-oracle-64kUpgrade linux-image-6.8.0-1054-gcp-64kUpgrade linux-image-6.8.0-1052-awsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-gcp-6.17Upgrade linux-image-aws-6.17Upgrade linux-image-oem-24.04aUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-realtime-6.17Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.17.0-1010-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.17.0-1012-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.17.0-1020-oemUpgrade linux-image-6.8.0-1054-gcp-fipsUpgrade linux-image-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1051-ibmUpgrade linux-image-virtual-6.17Upgrade linux-image-6.8.0-110-lowlatency-64kUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-6.17.0-1011-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-oem-24.04dUpgrade linux-image-oem-24.04bUpgrade linux-image-6.17.0-1012-gcp-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1052-raspiUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8 | Apr 17, 2026 | Jan 13, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub