Infinite Loop Vulnerability in Linux Kernel F2FS Component

CVE-2025-40333

What is CVE-2025-40333?

A vulnerability in the Linux kernel's F2FS (Flash-Friendly File System) can lead to an infinite loop during the insertion of extent nodes in an rb tree when incorrect extent info data is encountered. This situation arises specifically when the CONFIG_F2FS_CHECK_FS option is disabled (set to 'n'). Developers have addressed the issue by implementing a check that returns NULL and logs relevant kernel messages, preventing the system from entering an endless loop state.

References