Riskcovery

CVE-2025-68315

f2fs: fix to detect potential corrupted nid in free_nid_list

State
Published
Severity
9.8 Critical
Published
Dec 16, 2025
Updated
Aug 5, 2026
Reserved
Dec 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to detect potential corrupted nid in free_nid_list

As reported, on-disk footer.ino and footer.nid is the same and out-of-range, let's add sanity check on f2fs_alloc_nid() to detect any potential corruption in free_nid_list.

Scores

CVSSScoreVectorSource
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 to before 88b2ddb0c4f1dc874d4598e78cc830c64315ed86Affected
  • 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 to before 9337ed5e777e1c19854928cba7a8131dd00e611bAffected
  • 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 to before 6b9525596a83cd5b7bbc2c7bd5f9ad9cf5ad60faAffected
  • 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 to before adbcb34f03abb89e681a5907c4c3ce4bf224991dAffected
  • 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 to before 8fc6056dcf79937c46c97fa4996cda65956437a9Affected
LinuxLinux
  • 3.8Affected
  • before 3.8Not affected
  • 6.1.175 through 6.1.*Not affected
  • 6.6.140 through 6.6.*Not affected
  • 6.12.58 through 6.12.*Not affected
  • 6.17.8 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.