In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix to avoid memory leak in f2fs_rename()
syzbot reported a f2fs bug as below:
BUG: memory leak unreferenced object 0xffff888127f70830 (size 16): comm "syz.0.23", pid 6144, jiffies 4294943712 hex dump (first 16 bytes): 3c af 57 72 5b e6 8f ad 6e 8e fd 33 42 39 03 ff <.Wr[...n..3B9.. backtrace (crc 925f8a80): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4520 [inline] slab_alloc_node mm/slub.c:4844 [inline] __do_kmalloc_node mm/slub.c:5237 [inline] __kmalloc_noprof+0x3bd/0x560 mm/slub.c:5250 kmalloc_noprof include/linux/slab.h:954 [inline] fscrypt_setup_filename+0x15e/0x3b0 fs/crypto/fname.c:364 f2fs_setup_filename+0x52/0xb0 fs/f2fs/dir.c:143 f2fs_rename+0x159/0xca0 fs/f2fs/namei.c:961 f2fs_rename2+0xd5/0xf20 fs/f2fs/namei.c:1308 vfs_rename+0x7ff/0x1250 fs/namei.c:6026 filename_renameat2+0x4f4/0x660 fs/namei.c:6144 __do_sys_renameat2 fs/namei.c:6173 [inline] __se_sys_renameat2 fs/namei.c:6168 [inline] __x64_sys_renameat2+0x59/0x80 fs/namei.c:6168 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xe2/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f
The root cause is in commit 40b2d55e0452 ("f2fs: fix to create selinux label during whiteout initialization"), we added a call to f2fs_setup_filename() without a matching call to f2fs_free_filename(), fix it.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-aws-64kUpgrade linux-image-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-gcp-7.0Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-7.0.0-1008-aws-64kUpgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-raspi-7.0Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-7.0.0-1008-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-7.0.0-1014-raspi-realtimeUpgrade linux-image-awsUpgrade linux-image-virtual-7.0Upgrade linux-image-oem-20.04dUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-oem-24.04bUpgrade linux-image-generic-7.0Upgrade linux-image-xilinxUpgrade linux-image-7.0.0-1007-oracleUpgrade linux-image-7.0.0-28-genericUpgrade linux-image-azure-fde-7.0Upgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-7.0.0-27-genericUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-generic-6.8Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-64k-7.0Upgrade linux-image-azure-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-oem-24.04dUpgrade linux-image-oracleUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-realtime-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-oem-24.04cUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-kvmUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-7.0.0-1009-ibmUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-azure-fde-6.8Upgrade linux-image-6.8.0-136-fipsUpgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-gcpUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04dUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-nvidiaUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-azure-7.0Upgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-gke-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-generic-64k-7.0Upgrade linux-image-ibmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-nvidia-6.8Upgrade linux-image-genericUpgrade linux-image-gcp-fipsUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-7.0Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-tegraUpgrade linux-image-7.0.0-1007-gcp-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-7.0.0-1013-nvidia-64kUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-raspi-6.8Upgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-7.0.0-1014-raspiUpgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-ibm-7.0Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-7.0.0-1007-gcpUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-6.8Upgrade linux-image-7.0.0-27-realtimeUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-realtime-7.0Upgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-nvidia-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-laptop-23.10Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-gkeopUpgrade linux-image-7.0.0-27-realtime-64kUpgrade linux-image-7.0.0-1013-nvidiaUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-intel-iotgUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-azureUpgrade linux-image-7.0.0-27-generic-64kUpgrade linux-image-7.0.0-1007-oracle-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-gke-64kUpgrade linux-image-raspiUpgrade linux-image-nvidia-7.0Upgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-aws-7.0Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-xilinx-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-lowlatency-6.8 | Jul 1, 2026 | May 1, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 10, 2026 | May 1, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub