Linux Kernel F2FS Filesystem Garbage Collection Race Condition Vulnerability

Vulnerability

A vulnerability in the Linux kernel's F2FS (Flash-Friendly File System) has been addressed. The issue arose from a race condition between the 'fallocate' operation on pinning files and block allocation, leading to inconsistencies in segment type management. This inconsistency caused the filesystem to halt unexpectedly. The vulnerability was present in the F2FS implementation for devices with zoned storage, specifically in versions prior to the fix.

Impact

Exploitation of this vulnerability could lead to filesystem corruption, causing the F2FS to stop functioning properly and require manual intervention to recover.

Reproduction

The vulnerability can be reproduced by performing a 'fallocate' operation on a pinning file while simultaneously allocating data blocks. This race condition will create an inconsistency in the segment type management, which can be observed through the filesystem's error logs.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched version are available on the Linux Kernel Archive.

Added: Nov 12, 2025, 11:42 AM
Updated: Nov 12, 2025, 5:11 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
3.9
remediation
7.7
relevance
1.0
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.