CVE-2025-68315
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to detect potential corrupted nid in free_nid_list As reported, on-disk footer.ino and footer.nid is the same and out-of-range, let's add sanity check on f2fs_alloc_nid() to…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.43%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to detect potential corrupted nid in free_nid_list As reported, on-disk footer.ino and footer.nid is the same and out-of-range, let's add sanity check on f2fs_alloc_nid() to detect any potential corruption in free_nid_list.
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.43% probability · 36th percentile
- CISA KEV
- Not listed
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/6b9525596a83cd5b7bbc2c7bd5f9ad9cf5ad60fa
- https://git.kernel.org/stable/c/88b2ddb0c4f1dc874d4598e78cc830c64315ed86
- https://git.kernel.org/stable/c/8fc6056dcf79937c46c97fa4996cda65956437a9
- https://git.kernel.org/stable/c/9337ed5e777e1c19854928cba7a8131dd00e611b
- https://git.kernel.org/stable/c/adbcb34f03abb89e681a5907c4c3ce4bf224991d
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.