CVE-2025-68315
kernel: Linux kernel (f2fs): Denial of service or data corruption via f2fs metadata flaw
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · December 16, 2025
Updated · August 14, 2026
Description
A flaw was found in the Linux kernel's f2fs filesystem. Insufficient validation of on-disk metadata, specifically when footer.ino and footer.nid are identical and out-of-range, can lead to potential corruption within the free_nid_list during the f2fs_alloc_nid() operation. A remote, unauthenticated attacker could exploit this vulnerability to cause a denial of service or compromise data integrity.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-354 · Improper Validation of Integrity Check Value