Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-23235

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix out-of-bounds access in sysfs attribute read/write Some f2fs sysfs attributes suffer from out-of-bounds memory access and incorrect handling of integer values whose size is not 4 bytes. For example: vm:~# echo 65537 > /sys/fs/f2fs/vde/carve_out vm:~# cat /sys/fs/f2fs/vde/carve_out 65537 vm:~# echo 4294967297 > /sys/fs/f2fs/vde/atgc_age_threshold vm:~# cat /sys/fs/f2fs/vde/atgc_age_threshold 1 carve_out maps to {str
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:ca87c801c6cf7fd9d4c82df102c673f59d2493aaf8e56aa33639b3cc0098bec7
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/f2fs/sysfs.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.12"},{"lessThan":"3.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.251","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.201","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.164","versionType":"semver"},{"lessThanOrEqu…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:71e9f0e3e1c793833049af12bde325fba9e5f4201cc741fd35e81e1163aab1b6 · sha256:1c4c2d0ea6cd7cba… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/f2fs/sysfs.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"e85a99db9ab85dfc30d93b0ca0e9156f3127f55a","status":"affected","version":"b59d0bae6ca30c496f298881616258f9cde0d9c6","versionType":"git"},{"lessThan":"438a405fbad6882df0e34b3e1a16839a71f04240","status":"affected","version":"b59d0bae6ca30c496f298881616258f9cde0d9c6","versionType":"git"},{"lessThan":"6a6c07a9b49e43f0df42d7118fc76aa555c73d98","status":"affected","version":"b59d0bae6ca30c496f298881616258…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:71e9f0e3e1c793833049af12bde325fba9e5f4201cc741fd35e81e1163aab1b6 · sha256:1c4c2d0ea6cd7cba… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["fs/f2fs/sysfs.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.12"},{"lessThan":"3.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.251","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.201","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.164","versionType":"semver"},{"lessThanOrEqu…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:71e9f0e3e1c793833049af12bde325fba9e5f4201cc741fd35e81e1163aab1b6 · sha256:1c4c2d0ea6cd7cba… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/f2fs/sysfs.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"e85a99db9ab85dfc30d93b0ca0e9156f3127f55a","status":"affected","version":"b59d0bae6ca30c496f298881616258f9cde0d9c6","versionType":"git"},{"lessThan":"438a405fbad6882df0e34b3e1a16839a71f04240","status":"affected","version":"b59d0bae6ca30c496f298881616258f9cde0d9c6","versionType":"git"},{"lessThan":"6a6c07a9b49e43f0df42d7118fc76aa555c73d98","status":"affected","version":"b59d0bae6ca30c496f298881616258…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:71e9f0e3e1c793833049af12bde325fba9e5f4201cc741fd35e81e1163aab1b6 · sha256:1c4c2d0ea6cd7cba… · /containers/cna/affected/0

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/3a905e183c047577b154f08a78ac3039e9454703"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:71e9f0e3e1c793833049af12bde325fba9e5f4201cc741fd35e81e1163aab1b6 · sha256:1c4c2d0ea6cd7cba… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/438a405fbad6882df0e34b3e1a16839a71f04240"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:71e9f0e3e1c793833049af12bde325fba9e5f4201cc741fd35e81e1163aab1b6 · sha256:1c4c2d0ea6cd7cba… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/4ef30b9f1641c9e877792df6b049f1cf507d002d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:71e9f0e3e1c793833049af12bde325fba9e5f4201cc741fd35e81e1163aab1b6 · sha256:1c4c2d0ea6cd7cba… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/6a6c07a9b49e43f0df42d7118fc76aa555c73d98"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:71e9f0e3e1c793833049af12bde325fba9e5f4201cc741fd35e81e1163aab1b6 · sha256:1c4c2d0ea6cd7cba… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/98ea0039dbfdd00e5cc1b9a8afa40434476c0955"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:71e9f0e3e1c793833049af12bde325fba9e5f4201cc741fd35e81e1163aab1b6 · sha256:1c4c2d0ea6cd7cba… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/d4a594dd952df123cbdcdee9b9640d9d55e4a954"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:71e9f0e3e1c793833049af12bde325fba9e5f4201cc741fd35e81e1163aab1b6 · sha256:1c4c2d0ea6cd7cba… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/e85a99db9ab85dfc30d93b0ca0e9156f3127f55a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:71e9f0e3e1c793833049af12bde325fba9e5f4201cc741fd35e81e1163aab1b6 · sha256:1c4c2d0ea6cd7cba… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/eebd72cff518ac87e660aefb8a41224bd88c32ce"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:71e9f0e3e1c793833049af12bde325fba9e5f4201cc741fd35e81e1163aab1b6 · sha256:1c4c2d0ea6cd7cba… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer