Buffer Overflow in Linux Kernel's f2fs Allocator

CVE-2025-68315

What is CVE-2025-68315?

A vulnerability in the Linux kernel's f2fs file system has been identified, where potential corruption in the free_nid_list can occur. This manifests when both the on-disk 'footer.ino' and 'footer.nid' overlap and are out of range. To mitigate this risk, a sanity check has been introduced in the f2fs_alloc_nid() function to detect such corruptions effectively. This enhancement aims to safeguard data integrity and improve resilience against potential exploitation.

References