Linux Kernel F2FS Filesystem Dirty Page Management Vulnerability During Unmount

Vulnerability

A vulnerability has been identified in the Linux kernel's F2FS (Flash-Friendly File System) implementation. This issue arises during the unmounting process when a checkpoint error is present. The F2FS filesystem fails to properly manage dirty pages, which can lead to a kernel bug where the filesystem's synchronization node count is incorrectly reported. This vulnerability can cause a deadlock by not allowing all F2FS writeback control data pages to be processed, leaving some pages dirty and unflushed. The problem is exacerbated for directory pages, which are intentionally left dirty to preserve the latest directory structure.

Impact

This vulnerability can cause a kernel panic by triggering a generic F2FS bug assertion failure, disrupting normal system operations and potentially leading to data loss.

Reproduction

The vulnerability can be reproduced by mounting an F2FS filesystem, introducing a checkpoint error, and then unmounting the filesystem. The F2FS filesystem will incorrectly handle the dirty pages, especially those related to directory structures, leading to the assertion failure and kernel panic.

Remediation

Users can upgrade to the latest stable version of the Linux kernel, where this vulnerability has been addressed. Instructions for downloading the latest kernel version can be found on the official Linux kernel website.

Added: Dec 24, 2025, 3:10 PM
Updated: Dec 24, 2025, 3:10 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.3
remediation
7.7
relevance
1.6
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.