Linux Kernel F2FS Filesystem Dirty Inode Handling Vulnerability

Vulnerability

A vulnerability in the Linux kernel's F2FS filesystem has been addressed, concerning the management of dirty inodes. The issue arose because inode and dnode nodes shared the same node ID, leading to complications during the eviction process. When the F2FS inode eviction function was called, it attempted to truncate dnode nodes, which invalidated their corresponding NAT entries. This created a conflict when the inode nodes were truncated, as the process failed due to the invalid NAT entry, leaving the inode marked as dirty. The vulnerability has been fixed by ensuring that dirty inodes are cleared and by setting a flag to indicate that a filesystem check is needed.

Impact

The vulnerability could lead to improper handling of inode states, causing inodes to remain incorrectly marked as dirty, which could disrupt normal filesystem operations.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.0
remediation
7.7
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.