In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix to avoid memory leak in f2fs_rename()
syzbot reported a f2fs bug as below:
BUG: memory leak unreferenced object 0xffff888127f70830 (size 16): comm "syz.0.23", pid 6144, jiffies 4294943712 hex dump (first 16 bytes): 3c af 57 72 5b e6 8f ad 6e 8e fd 33 42 39 03 ff <.Wr[...n..3B9.. backtrace (crc 925f8a80): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4520 [inline] slab_alloc_node mm/slub.c:4844 [inline] __do_kmalloc_node mm/slub.c:5237 [inline] __kmalloc_noprof+0x3bd/0x560 mm/slub.c:5250 kmalloc_noprof include/linux/slab.h:954 [inline] fscrypt_setup_filename+0x15e/0x3b0 fs/crypto/fname.c:364 f2fs_setup_filename+0x52/0xb0 fs/f2fs/dir.c:143 f2fs_rename+0x159/0xca0 fs/f2fs/namei.c:961 f2fs_rename2+0xd5/0xf20 fs/f2fs/namei.c:1308 vfs_rename+0x7ff/0x1250 fs/namei.c:6026 filename_renameat2+0x4f4/0x660 fs/namei.c:6144 __do_sys_renameat2 fs/namei.c:6173 [inline] __se_sys_renameat2 fs/namei.c:6168 [inline] __x64_sys_renameat2+0x59/0x80 fs/namei.c:6168 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xe2/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f
The root cause is in commit 40b2d55e0452 ("f2fs: fix to create selinux label during whiteout initialization"), we added a call to f2fs_setup_filename() without a matching call to f2fs_free_filename(), fix it.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Ubuntu | — | Upgrade linux-image-raspi-realtimeUpgrade linux-image-7.0.0-1009-ibmUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-oem-24.04dUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-oem-20.04dUpgrade linux-image-gcp-7.0Upgrade linux-image-gkeUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-realtimeUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-realtime-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-7.0.0-1008-aws-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-gcpUpgrade linux-image-aws-64k-7.0Upgrade linux-image-6.8.0-1061-awsUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-azure-fde-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-oem-24.04bUpgrade linux-image-7.0.0-1007-oracleUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-fde-7.0Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-7.0Upgrade linux-image-7.0.0-28-genericUpgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-xilinxUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-raspi-7.0Upgrade linux-image-oracle-64k-7.0Upgrade linux-image-fipsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-7.0.0-1008-awsUpgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-64kUpgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-7.0.0-27-genericUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-virtual-7.0Upgrade linux-image-7.0.0-1014-raspi-realtimeUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-genericUpgrade linux-image-7.0.0-1007-oracle-64kUpgrade linux-image-oem-22.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-aws-7.0Upgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-gke-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-7.0.0-1014-raspiUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-raspiUpgrade linux-image-nvidia-7.0Upgrade linux-image-aws-fipsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-6.8Upgrade linux-image-generic-64k-7.0Upgrade linux-image-7.0.0-1007-gcp-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-gcp-fipsUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-7.0Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-azure-7.0Upgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-xilinx-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-realtime-7.0Upgrade linux-image-raspi-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-azureUpgrade linux-image-7.0.0-27-generic-64kUpgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-intel-iotgUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-7.0.0-27-realtimeUpgrade linux-image-7.0.0-1007-gcpUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-6.8Upgrade linux-image-7.0.0-1010-azureUpgrade linux-image-gke-6.8Upgrade linux-image-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-ibm-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-ibm-7.0Upgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidiaUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-7.0.0-1013-nvidia-64kUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-gkeopUpgrade linux-image-azure-fipsUpgrade linux-image-7.0.0-27-realtime-64kUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-laptop-23.10Upgrade linux-image-ibm-classicUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-7.0.0-1013-nvidia | Jul 1, 2026 | May 1, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 10, 2026 | May 1, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub