CVE-2025-68315

CriticalCVSS 9.8/10Last modified Oct 14, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to detect potential corrupted nid in free_nid_list

As reported, on-disk footer.ino and footer.nid is the same and out-of-range, let's add sanity check on f2fs_alloc_nid() to detect any potential corruption in free_nid_list.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
LinuxLinux>= 98e4da8ca301e062d79ae168c67e56f3c3de3ce4, < 88b2ddb0c4f1dc874d4598e78cc830c64315ed86; >= 98e4da8ca301e062d79ae168c67e56f3c3de3ce4, < 9337ed5e777e1c19854928cba7a8131dd00e611b; >= 98e4da8ca301e062d79ae168c67e56f3c3de3ce4, < 6b9525596a83cd5b7bbc2c7bd5f9ad9cf5ad60fa; >= 98e4da8ca301e062d79ae168c67e56f3c3de3ce4, < adbcb34f03abb89e681a5907c4c3ce4bf224991d; >= 98e4da8ca301e062d79ae168c67e56f3c3de3ce4, < 8fc6056dcf79937c46c97fa4996cda65956437a9
LinuxLinux3.8

References

Timeline

Published
Dec 16, 2025
Last modified
Oct 14, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-68316In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix invalid probe error return value After DME Link SCVE-2025-683177.8In the Linux kernel, the following vulnerability has been resolved: io_uring/zctx: check chained notif contexts Send zc only links ubuf_inCVE-2025-68318In the Linux kernel, the following vulnerability has been resolved: clk: thead: th1520-ap: set all AXI clocks to CLK_IS_CRITICAL The AXI cCVE-2025-68319In the Linux kernel, the following vulnerability has been resolved: netconsole: Acquire su_mutex before navigating configs hierarchy ThereCVE-2025-68326.1The All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier plugin for WordPress is vulnerable to Reflected Cross-Site ScrCVE-2025-683207.5In the Linux kernel, the following vulnerability has been resolved: lan966x: Fix sleeping in atomic context The following warning was seenCVE-2025-683217.5In the Linux kernel, the following vulnerability has been resolved: page_pool: always add GFP_NOWARN for ATOMIC allocations Driver authorsCVE-2025-68322In the Linux kernel, the following vulnerability has been resolved: parisc: Avoid crash due to unaligned access in unwinder Guenter Roeck CVE-2025-68323In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: fix use-after-free caused by uec->work The delayed wCVE-2025-68324In the Linux kernel, the following vulnerability has been resolved: scsi: imm: Fix use-after-free bug caused by unfinished delayed work ThCVE-2025-68325In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop In cakeCVE-2025-68326In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Fix stack_depot usage Add missing stack_depot_init() call
CVE-2025-68315: Critical severity, CVSS 9.8 | Vulnix