CVE-2025-38652

f2fs: fix to avoid out-of-boundary access in devs.path

published August 22, 2025

CVSS
—
EPSS
0%
Percentile
7.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to avoid out-of-boundary access in devs.path

- touch /mnt/f2fs/012345678901234567890123456789012345678901234567890123

- truncate -s $((1024*1024*1024)) \

/mnt/f2fs/012345678901234567890123456789012345678901234567890123

- touch /mnt/f2fs/file

- truncate -s $((1024*1024*1024)) /mnt/f2fs/file

- mkfs.f2fs /mnt/f2fs/012345678901234567890123456789012345678901234567890123 \

-c /mnt/f2fs/file

- mount /mnt/f2fs/012345678901234567890123456789012345678901234567890123 \

/mnt/f2fs/loop

[16937.192225] F2FS-fs (loop0): Mount Device [ 0]: /mnt/f2fs/012345678901234567890123456789012345678901234567890123\xff\x01, 511, 0 - 3ffff

[16937.192268] F2FS-fs (loop0): Failed to find devices

If device path length equals to MAX_PATH_LEN, sbi->devs.path[] may

not end up w/ null character due to path array is fully filled, So

accidently, fields locate after path[] may be treated as part of

device path, result in parsing wrong device path.

struct f2fs_dev_info {

...

char path[MAX_PATH_LEN];

...

};

Let's add one byte space for sbi->devs.path[] to store null

character of device path string.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00182 · 7.4th percentile
Published
2025-08-22T16:00Z
EPSS history
Timeline
  • 22 AUG 16:00Z
    f2fs: fix to avoid out-of-boundary access in devs.path
    cvelistv5