Out-of-Bounds Access Vulnerability in Linux Kernel F2FS Filesystem

CVE-2025-38652

What is CVE-2025-38652?

A vulnerability exists in the F2FS filesystem of the Linux kernel that could allow for out-of-bounds access due to improper handling of device path lengths. When device path lengths reach the maximum limit, the allocation of memory for the device path does not allow for a terminating null character, resulting in potential misinterpretation of memory contents. This could lead to the incorrect parsing of device paths, which can compromise the integrity of the file system and potentially allow for unauthorized access or data corruption.

References