Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-68315

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to detect potential corrupted nid in free_nid_list As reported, on-disk footer.ino and footer.nid is the same and out-of-range, let's add sanity check on f2fs_alloc_nid() to detect any potential corruption in free_nid_list.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:a02041f78540dfb04d499654e0aae6fb5202499633099715877c0d1362466338
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/f2fs/node.c","include/linux/f2fs_fs.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"88b2ddb0c4f1dc874d4598e78cc830c64315ed86","status":"affected","version":"98e4da8ca301e062d79ae168c67e56f3c3de3ce4","versionType":"git"},{"lessThan":"9337ed5e777e1c19854928cba7a8131dd00e611b","status":"affected","version":"98e4da8ca301e062d79ae168c67e56f3c3de3ce4","versionType":"git"},{"lessThan":"6b9525596a83cd5b7bbc2c7bd5f9ad9cf5ad60fa","status":"affected","version":"98e4d…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ca600f3500c6100c3a421a918126e4b5f8129e8ed813e16afd46bc00a50e1c44 · sha256:7d16064190aa35c6… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/f2fs/node.c","include/linux/f2fs_fs.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.8"},{"lessThan":"3.8","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.140","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.58","versionType":"semv…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ca600f3500c6100c3a421a918126e4b5f8129e8ed813e16afd46bc00a50e1c44 · sha256:7d16064190aa35c6… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/f2fs/node.c","include/linux/f2fs_fs.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"88b2ddb0c4f1dc874d4598e78cc830c64315ed86","status":"affected","version":"98e4da8ca301e062d79ae168c67e56f3c3de3ce4","versionType":"git"},{"lessThan":"9337ed5e777e1c19854928cba7a8131dd00e611b","status":"affected","version":"98e4da8ca301e062d79ae168c67e56f3c3de3ce4","versionType":"git"},{"lessThan":"6b9525596a83cd5b7bbc2c7bd5f9ad9cf5ad60fa","status":"affected","version":"98e4d…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ca600f3500c6100c3a421a918126e4b5f8129e8ed813e16afd46bc00a50e1c44 · sha256:7d16064190aa35c6… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["fs/f2fs/node.c","include/linux/f2fs_fs.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.8"},{"lessThan":"3.8","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.140","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.58","versionType":"semv…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ca600f3500c6100c3a421a918126e4b5f8129e8ed813e16afd46bc00a50e1c44 · sha256:7d16064190aa35c6… · /containers/cna/affected/1

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":9.8,"baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:ca600f3500c6100c3a421a918126e4b5f8129e8ed813e16afd46bc00a50e1c44 · sha256:7d16064190aa35c6… · /containers/cna/metrics/0/cvssV3_1

Source references

5 source assertions
{"url":"https://git.kernel.org/stable/c/6b9525596a83cd5b7bbc2c7bd5f9ad9cf5ad60fa"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ca600f3500c6100c3a421a918126e4b5f8129e8ed813e16afd46bc00a50e1c44 · sha256:7d16064190aa35c6… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/88b2ddb0c4f1dc874d4598e78cc830c64315ed86"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ca600f3500c6100c3a421a918126e4b5f8129e8ed813e16afd46bc00a50e1c44 · sha256:7d16064190aa35c6… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/8fc6056dcf79937c46c97fa4996cda65956437a9"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ca600f3500c6100c3a421a918126e4b5f8129e8ed813e16afd46bc00a50e1c44 · sha256:7d16064190aa35c6… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/9337ed5e777e1c19854928cba7a8131dd00e611b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ca600f3500c6100c3a421a918126e4b5f8129e8ed813e16afd46bc00a50e1c44 · sha256:7d16064190aa35c6… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/adbcb34f03abb89e681a5907c4c3ce4bf224991d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ca600f3500c6100c3a421a918126e4b5f8129e8ed813e16afd46bc00a50e1c44 · sha256:7d16064190aa35c6… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer