In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix fsck inconsistency caused by FGGC of node block
During FGGC node block migration, fsck may incorrectly treat the migrated node block as fsync-written data.
The reproduction scenario: root@vm:/mnt/f2fs# seq 1 2048 | xargs -n 1 ./test_sync // write inline inode and sync root@vm:/mnt/f2fs# rm -f 1 root@vm:/mnt/f2fs# sync root@vm:/mnt/f2fs# f2fs_io gc_range // move data block in sync mode and not write CP SPO, "fsck --dry-run" find inode has already checkpointed but still with DENT_BIT_SHIFT set
The root cause is that GC does not clear the dentry mark and fsync mark during node block migration, leading fsck to misinterpret them as user-issued fsync writes.
In BGGC mode, node block migration is handled by f2fs_sync_node_pages(), which guarantees the dentry and fsync marks are cleared before writing.
This patch move the set/clear of the fsync|dentry marks into __write_node_folio to make the logic clearer, and ensures the fsync|dentry mark is cleared in FGGC.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidiaUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-gke-7.0Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-7.0.0-1008-gcpUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-oem-26.04aUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-aws-64k-7.0Upgrade linux-image-gcp-64kUpgrade linux-image-7.0.0-28-genericUpgrade linux-image-gke-64kUpgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-realtime-7.0Upgrade linux-image-oracle-7.0Upgrade linux-image-6.8.0-1035-nvidia-tegraUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-oem-7.0Upgrade linux-image-azure-fdeUpgrade linux-image-gke-64k-7.0Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-genericUpgrade linux-image-nvidia-bosUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-ibm-7.0Upgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-nvidia-7.0Upgrade linux-image-raspiUpgrade linux-image-ibmUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-oem-26.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-aws-7.0Upgrade linux-image-oem-24.04bUpgrade linux-image-azure-7.0Upgrade linux-image-oem-24.04dUpgrade linux-image-7.0.0-1008-gcp-64kUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-oracleUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-generic-7.0Upgrade linux-image-generic-64k-7.0Upgrade linux-image-7.0.0-1011-oracleUpgrade linux-image-7.0.0-1003-gkeUpgrade linux-image-azure-fde-7.0Upgrade linux-image-7.0.0-28-realtime-64kUpgrade linux-image-realtimeUpgrade linux-image-virtualUpgrade linux-image-gkeUpgrade linux-image-oracle-64kUpgrade linux-image-awsUpgrade linux-image-raspi-realtimeUpgrade linux-image-7.0.0-1011-oracle-64kUpgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1035-nvidia-tegra-rtUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-7.0.0-1009-oemUpgrade linux-image-oem-24.04Upgrade linux-image-7.0.0-1003-gke-64kUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-virtual-7.0Upgrade linux-image-oem-24.04aUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-raspi-7.0Upgrade linux-image-7.0.0-28-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-7.0.0-1009-awsUpgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-gcp-7.0Upgrade linux-image-realtime-64kUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-oem-24.04c | Jul 20, 2026 | May 28, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub