f2fs: fix to clear dirty flag on folio in error path (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.17 % · centile 6 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Received
Rechercher sur…
Description
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to clear dirty flag on folio in error path If node block is corrupted due to chksum mismatch or inconsistent footer info, it needs to drop clear flag of node folio, in order to persist inconsistent node data to storage.
Références
- https://git.kernel.org/stable/c/9e0d9a317ce2cae3768626599d857bb3f0fd96fc
- https://git.kernel.org/stable/c/21b7f66716b4fd0dffac4fcd06602b888f3c4531
- https://git.kernel.org/stable/c/34732e3a8713f3b7acd1a0ea37e3a6bee4c78550
- https://git.kernel.org/stable/c/ab35ae07f2b5b4e118ea47b88577fc7d0e797b17
- https://git.kernel.org/stable/c/3923ec2b98c96dda4a8bfab81d22553dbf0dd6c2
- https://git.kernel.org/stable/c/5b86eab84ac8e9289b5afc52ef88ab18ba5bacab
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | Linux |
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | NVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary) |
Références européennes
- ENISA EUVD · EUVD-2026-80432
- GCVE · GCVE-0-2026-89832
Avis du CERT-FR
- CERTFR-2026-AVI-1375 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1374 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected b42b179bda9ff11075a6fc2bac4d9e400513679a < 9e0d9a317ce2cae3768626599d857bb3f0fd96fc ; affected b42b179bda9ff11075a6fc2bac4d9e400513679a < 21b7f66716b4fd0dffac4fcd06602b888f3c4531 ; affected b42b179bda9ff11075a6fc2bac4d9e400513679a < 34732e3a8713f3b7acd1a0ea37e3a6bee4c78550 ; affected b42b179bda9ff11075a6fc2bac4d9e400513679a < ab35ae07f2b5b4e118ea47b88577fc7d0e797b17 ; affected b42b179bda9ff11075a6fc2bac4d9e400513679a < 3923ec2b98c96dda4a8bfab81d22553dbf0dd6c2 ; affected b42b179bda9ff11075a6fc2bac4d9e400513679a < 5b86eab84ac8e9289b5afc52ef88ab18ba5bacab |
| Linux · Linux | affected 5.2 ; unaffected 0 < 5.2 ; unaffected 6.1.191 ≤ 6.1.* ; unaffected 6.6.160 ≤ 6.6.* ; unaffected 6.12.112 ≤ 6.12.* ; unaffected 6.18.51 ≤ 6.18.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |