Resource management error in Linux kernel f2fs

1) Resource management error

EUVDB-ID: #VU112329

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2025-38219

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the f2fs_unlink() function in fs/f2fs/namei.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's repository.

Vulnerable software versions

Linux kernel: All versions

CPE2.3

• cpe:2.3:o:linux_foundation:linux_kernel:*:*:*:*:*:*:*:*

External links

https://git.kernel.org/stable/c/1f6332872374b7f482fc4ad865f9422fedb587fc
https://git.kernel.org/stable/c/42cb74a92adaf88061039601ddf7c874f58b554e
https://git.kernel.org/stable/c/5018d035530b6fbfad33eeb1dd1bc87da419a276
https://git.kernel.org/stable/c/a87cbcc909ccfd394d4936a94663f586453d0961
https://git.kernel.org/stable/c/aaa644e7ffff02e12c89cbce4753bc0b6f23ff87
https://git.kernel.org/stable/c/d14cbed4baccd712447fb3f9c011f008b56b2097
https://git.kernel.org/stable/c/d9a55869d8237e677ddaa18b0f58586364cfbc1c
https://git.kernel.org/stable/c/fbfe8446cd3274b9e367f5708d94574230a44409

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.