SB2025082033 - Use-after-free in Linux kernel f2fs
Published: August 20, 2025
Security Bulletin ID
SB2025082033
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Use-after-free (CVE-ID: CVE-2025-38578)
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a use-after-free error within the fs/f2fs/inode.c. A local user can escalate privileges on the system.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/3d37cadaac1a8e108e576297aab9125b24ea2dfe
- https://git.kernel.org/stable/c/6cac47af39b2b8edbb41d47c3bd9c332f83e9932
- https://git.kernel.org/stable/c/7c30d79930132466f5be7d0b57add14d1a016bda
- https://git.kernel.org/stable/c/917ae5e280bc263f56c83fba0d0f0be2c4828083
- https://git.kernel.org/stable/c/a4b0cc9e0bba7525a29f37714e88df12a47997a2
- https://git.kernel.org/stable/c/dea243f58a8391e76f42ad5eb59ff210519ee772