SB2025082082 - Use of uninitialized resource in Linux kernel f2fs
Published: August 20, 2025
Security Bulletin ID
SB2025082082
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Use of uninitialized resource (CVE-ID: CVE-2025-38579)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to use of uninitialized resource within the f2fs_init_read_extent_tree() function in fs/f2fs/extent_cache.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/01b6f5955e0008af6bc3a181310d2744bb349800
- https://git.kernel.org/stable/c/154467f4ad033473e5c903a03e7b9bca7df9a0fa
- https://git.kernel.org/stable/c/44a79437309e0ee2276ac17aaedc71253af253a8
- https://git.kernel.org/stable/c/cc1615d5aba4f396cf412579928539a2b124c8a0
- https://git.kernel.org/stable/c/dabfa3952c8e6bfe6414dbf32e8b6c5f349dc898
- https://git.kernel.org/stable/c/e68b751ec2b15d866967812c57cfdfc1eba6a269