Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.8

CVE-2025-23130: Linux kernel f2fs file system can cause system panic

CVE-2025-23130 · published 1 year ago
Summary

The Linux kernel’s f2fs file system could crash the entire system when it runs out of free space during certain file‑allocation operations. This could happen on Linux distributions that include the affected kernel version. Applying the latest kernel updates from your Linux vendor will fix the problem and prevent the panic.

What to do
  • Update debian rootio-linux to version 6.12.63-1.root.io.64.
  • Update debian rootio-linux to version 6.1.159-1.root.io.75.
  • Update debian rootio-linux to version 6.12.88-1.root.io.124.
  • Update canonical linux-gcp to version 6.8.0-1052.55.
  • Update canonical linux-gke to version 6.8.0-1048.53.
  • Update canonical linux-gkeop to version 6.8.0-1035.38.
  • Update canonical linux-ibm to version 6.8.0-1049.49.
  • Update canonical linux-lowlatency to version 6.8.0-106.106.1.
  • Update canonical linux-nvidia to version 6.8.0-1049.52.
  • Update canonical linux-nvidia-lowlatency to version 6.8.0-1049.52.1.
  • Update canonical linux-nvidia-tegra to version 6.8.0-1020.20.
  • Update canonical linux-oracle to version 6.8.0-1047.48.
  • Update canonical linux-raspi to version 6.8.0-1050.54.
  • Update canonical linux-aws-6.8 to version 6.8.0-1050.53~22.04.1.
  • Update canonical linux-azure-6.8 to version 6.8.0-1051.57~22.04.1.
  • Update canonical linux-gcp-6.8 to version 6.8.0-1052.55~22.04.1.
  • Update canonical linux-hwe-6.8 to version 6.8.0-106.106~22.04.1.
  • Update canonical linux-ibm-6.8 to version 6.8.0-1049.49~22.04.1.
  • Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-106.106.1~22.04.1.
  • Update canonical linux-nvidia-6.8 to version 6.8.0-1049.52~22.04.1.
  • Update canonical linux-oracle-6.8 to version 6.8.0-1047.48~22.04.1.
  • Update canonical linux-riscv-6.8 to version 6.8.0-106.106~22.04.1.
  • Update canonical linux-realtime-6.8 to version 6.8.1-1045.46~22.04.1.
  • Update canonical linux to version 6.8.0-106.106.
  • Update canonical linux-aws to version 6.8.0-1050.53.
  • Update canonical linux-azure to version 6.8.0-1051.57.
  • Update canonical linux-xilinx to version 6.8.0-1028.29.
  • Update canonical linux-aws-fips to version 6.8.0-1050.53+fips1.
  • Update canonical linux-azure-fips to version 6.8.0-1052.58+fips1.
  • Update canonical linux-fips to version 6.8.0-106.106+fips1.
  • Update canonical linux-gcp-fips to version 6.8.0-1052.55+fips1.
  • Update canonical linux-raspi-realtime to version 6.8.0-2040.41.
  • Update canonical linux-realtime to version 6.8.1-1045.46.
  • Update debian rootio-linux to version 5.10.249-1.root.io.52.
  • Update canonical linux to version 6.8.0-138.138.aikido.86.
  • Update canonical rootio-linux to version 6.8.0-138.138.aikido.86.
  • Update canonical linux-bluefield to version 6.8.0-1017.21.
  • Update linux to version 5.15.0-198.208.aikido.116.
  • Update rootio-linux to version 5.15.0-198.208.aikido.116.
  • Update linux to version 6.8.0-146.146.aikido.89.
  • Update rootio-linux to version 6.8.0-146.146.aikido.89.
  • Update canonical linux-azure-fde-6.8 to version 6.8.0-1058.65~22.04.1.
  • Update canonical linux-azure-fde to version 6.8.0-1058.65.
  • Update linux to version 6.8.0-147.147.aikido.90.
  • Update rootio-linux to version 6.8.0-147.147.aikido.90.
  • Update linux to version 6.12.113-1.aikido.163.
  • Update rootio-linux to version 6.12.113-1.aikido.163.
  • Update linux to version 6.1.190-1.aikido.167.
  • Update rootio-linux to version 6.1.190-1.aikido.167.
  • Update linux kernel to version 6.14.2.
  • Update linux to version 5.15.0-202.212.aikido.118.
  • Update rootio-linux to version 5.15.0-202.212.aikido.118.
Affected software
Ecosystem VendorProductAffected versions
Root:Debian:13 debian rootio-linux < 6.12.63-1.root.io.64
< 6.12.88-1.root.io.124
Fix: upgrade to 6.12.63-1.root.io.64
Root:Debian:12 debian rootio-linux < 6.1.159-1.root.io.75
Fix: upgrade to 6.1.159-1.root.io.75
– linux linux_kernel >= 5.5, < 6.12.57
>= 6.13, < 6.14.2
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Ubuntu:22.04:LTS canonical linux-ibm All versions
Ubuntu:24.04:LTS canonical linux-gcp < 6.8.0-1052.55
Fix: upgrade to 6.8.0-1052.55
Ubuntu:24.04:LTS canonical linux-gcp-6.11 All versions
Ubuntu:24.04:LTS canonical linux-gke < 6.8.0-1048.53
Fix: upgrade to 6.8.0-1048.53
Ubuntu:24.04:LTS canonical linux-gkeop < 6.8.0-1035.38
Fix: upgrade to 6.8.0-1035.38
Ubuntu:24.04:LTS canonical linux-hwe-6.11 All versions
Ubuntu:24.04:LTS canonical linux-ibm < 6.8.0-1049.49
Fix: upgrade to 6.8.0-1049.49
Ubuntu:24.04:LTS canonical linux-intel All versions
Ubuntu:24.04:LTS canonical linux-lowlatency < 6.8.0-106.106.1
Fix: upgrade to 6.8.0-106.106.1
Ubuntu:24.04:LTS canonical linux-lowlatency-hwe-6.11 All versions
Ubuntu:24.04:LTS canonical linux-nvidia < 6.8.0-1049.52
Fix: upgrade to 6.8.0-1049.52
Ubuntu:24.04:LTS canonical linux-nvidia-6.11 All versions
Ubuntu:24.04:LTS canonical linux-nvidia-lowlatency < 6.8.0-1049.52.1
Fix: upgrade to 6.8.0-1049.52.1
Ubuntu:24.04:LTS canonical linux-nvidia-tegra < 6.8.0-1020.20
Fix: upgrade to 6.8.0-1020.20
Ubuntu:24.04:LTS canonical linux-oem-6.11 All versions
Ubuntu:24.04:LTS canonical linux-oem-6.8 All versions
Ubuntu:24.04:LTS canonical linux-oracle < 6.8.0-1047.48
Fix: upgrade to 6.8.0-1047.48
Ubuntu:24.04:LTS canonical linux-raspi < 6.8.0-1050.54
Fix: upgrade to 6.8.0-1050.54
Ubuntu:24.04:LTS canonical linux-raspi-realtime All versions
Ubuntu:24.04:LTS canonical linux-realtime All versions
Ubuntu:Pro:14.04:LTS canonical linux All versions
Ubuntu:Pro:14.04:LTS canonical linux-aws All versions
Ubuntu:Pro:14.04:LTS canonical linux-azure All versions
Ubuntu:Pro:14.04:LTS canonical linux-lts-xenial All versions
Ubuntu:Pro:16.04:LTS canonical linux All versions
Ubuntu:Pro:16.04:LTS canonical linux-aws All versions
Ubuntu:Pro:16.04:LTS canonical linux-aws-hwe All versions
Ubuntu:Pro:16.04:LTS canonical linux-azure All versions
Ubuntu:Pro:16.04:LTS canonical linux-gcp All versions
Ubuntu:Pro:16.04:LTS canonical linux-hwe All versions
Ubuntu:16.04:LTS canonical linux-hwe-edge All versions
Ubuntu:Pro:16.04:LTS canonical linux-kvm All versions
Ubuntu:Pro:16.04:LTS canonical linux-oracle All versions
Ubuntu:Pro:FIPS:16.04:LTS canonical linux-fips All versions
Ubuntu:Pro:18.04:LTS canonical linux All versions
Ubuntu:Pro:18.04:LTS canonical linux-aws All versions
Ubuntu:18.04:LTS canonical linux-aws-5.0 All versions
Ubuntu:18.04:LTS canonical linux-aws-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-aws-5.4 All versions
Ubuntu:18.04:LTS canonical linux-azure All versions
Ubuntu:Pro:18.04:LTS canonical linux-azure-4.15 All versions
Ubuntu:18.04:LTS canonical linux-azure-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-azure-5.4 All versions
Ubuntu:18.04:LTS canonical linux-azure-edge All versions
Ubuntu:18.04:LTS canonical linux-gcp All versions
Ubuntu:Pro:18.04:LTS canonical linux-gcp-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gcp-5.3 All versions
Showing 50 of 232. Show the rest
Ecosystem VendorProductAffected versions
Ubuntu:Pro:18.04:LTS canonical linux-gcp-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gke-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gke-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gkeop-5.4 All versions
Ubuntu:18.04:LTS canonical linux-hwe All versions
Ubuntu:Pro:18.04:LTS canonical linux-hwe-5.4 All versions
Ubuntu:18.04:LTS canonical linux-hwe-edge All versions
Ubuntu:Pro:18.04:LTS canonical linux-ibm-5.4 All versions
Ubuntu:Pro:18.04:LTS canonical linux-kvm All versions
Ubuntu:18.04:LTS canonical linux-oem All versions
Ubuntu:Pro:18.04:LTS canonical linux-oracle All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.0 All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-oracle-5.4 All versions
Ubuntu:Pro:18.04:LTS canonical linux-raspi-5.4 All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-gcp-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-gcp-fips All versions
Ubuntu:Pro:20.04:LTS canonical linux All versions
Ubuntu:Pro:20.04:LTS canonical linux-aws All versions
Ubuntu:20.04:LTS canonical linux-aws-5.11 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-aws-5.15 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-azure All versions
Ubuntu:20.04:LTS canonical linux-azure-5.11 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-azure-5.15 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-fde All versions
Ubuntu:Pro:20.04:LTS canonical linux-azure-fde-5.15 All versions
Ubuntu:Pro:20.04:LTS canonical linux-bluefield All versions
Ubuntu:Pro:20.04:LTS canonical linux-gcp All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.11 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-gcp-5.15 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.8 All versions
Ubuntu:20.04:LTS canonical linux-gke All versions
Ubuntu:20.04:LTS canonical linux-gke-5.15 All versions
Ubuntu:20.04:LTS canonical linux-gkeop All versions
Ubuntu:20.04:LTS canonical linux-gkeop-5.15 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.11 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-hwe-5.15 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-ibm All versions
Ubuntu:Pro:20.04:LTS canonical linux-ibm-5.15 All versions
Ubuntu:20.04:LTS canonical linux-intel-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-intel-iotg-5.15 All versions
Ubuntu:Pro:20.04:LTS canonical linux-iot All versions
Ubuntu:Pro:20.04:LTS canonical linux-kvm All versions
Ubuntu:Pro:20.04:LTS canonical linux-lowlatency-hwe-5.15 All versions
Ubuntu:Pro:20.04:LTS canonical linux-nvidia-tegra-5.15 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.10 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.14 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.6 All versions
Ubuntu:Pro:20.04:LTS canonical linux-oracle All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.11 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-oracle-5.15 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-raspi All versions
Ubuntu:20.04:LTS canonical linux-raspi2 All versions
Ubuntu:20.04:LTS canonical linux-riscv All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.11 All versions
Ubuntu:Pro:20.04:LTS canonical linux-riscv-5.15 All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-xilinx-zynqmp All versions
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-gcp-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-gcp-fips All versions
Ubuntu:22.04:LTS canonical linux All versions
Ubuntu:22.04:LTS canonical linux-allwinner-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws All versions
Ubuntu:22.04:LTS canonical linux-aws-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.2 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.5 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.8 < 6.8.0-1050.53~22.04.1
Fix: upgrade to 6.8.0-1050.53~22.04.1
Ubuntu:22.04:LTS canonical linux-azure All versions
Ubuntu:22.04:LTS canonical linux-azure-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.8 < 6.8.0-1051.57~22.04.1
Fix: upgrade to 6.8.0-1051.57~22.04.1
Ubuntu:22.04:LTS canonical linux-azure-fde All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.8 < 6.8.0-1058.65~22.04.1
Fix: upgrade to 6.8.0-1058.65~22.04.1
Ubuntu:22.04:LTS canonical linux-gcp All versions
Ubuntu:22.04:LTS canonical linux-gcp-5.19 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.5 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.8 < 6.8.0-1052.55~22.04.1
Fix: upgrade to 6.8.0-1052.55~22.04.1
Ubuntu:22.04:LTS canonical linux-gke All versions
Ubuntu:22.04:LTS canonical linux-gkeop All versions
Ubuntu:22.04:LTS canonical linux-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.8 < 6.8.0-106.106~22.04.1
Fix: upgrade to 6.8.0-106.106~22.04.1
Ubuntu:22.04:LTS canonical linux-ibm-6.8 < 6.8.0-1049.49~22.04.1
Fix: upgrade to 6.8.0-1049.49~22.04.1
Ubuntu:22.04:LTS canonical linux-intel-iot-realtime All versions
Ubuntu:22.04:LTS canonical linux-intel-iotg All versions
Ubuntu:22.04:LTS canonical linux-kvm All versions
Ubuntu:22.04:LTS canonical linux-lowlatency All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.8 < 6.8.0-106.106.1~22.04.1
Fix: upgrade to 6.8.0-106.106.1~22.04.1
Ubuntu:22.04:LTS canonical linux-nvidia All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.2 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.5 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.8 < 6.8.0-1049.52~22.04.1
Fix: upgrade to 6.8.0-1049.52~22.04.1
Ubuntu:22.04:LTS canonical linux-nvidia-tegra All versions
Ubuntu:22.04:LTS canonical linux-nvidia-tegra-igx All versions
Ubuntu:22.04:LTS canonical linux-oem-5.17 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.0 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.1 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle All versions
Ubuntu:22.04:LTS canonical linux-oracle-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle-6.8 < 6.8.0-1047.48~22.04.1
Fix: upgrade to 6.8.0-1047.48~22.04.1
Ubuntu:22.04:LTS canonical linux-raspi All versions
Ubuntu:22.04:LTS canonical linux-realtime All versions
Ubuntu:22.04:LTS canonical linux-riscv All versions
Ubuntu:22.04:LTS canonical linux-riscv-5.19 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.5 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.8 < 6.8.0-106.106~22.04.1
Fix: upgrade to 6.8.0-106.106~22.04.1
Ubuntu:22.04:LTS canonical linux-starfive-5.19 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.2 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.5 All versions
Ubuntu:22.04:LTS canonical linux-xilinx-zynqmp All versions
Ubuntu:Nvidia-BlueField:22.04:LTS canonical linux-bluefield All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-gcp-fips All versions
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-gcp-fips All versions
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-intel-iot-realtime All versions
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime All versions
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime-6.8 < 6.8.1-1045.46~22.04.1
Fix: upgrade to 6.8.1-1045.46~22.04.1
Ubuntu:24.04:LTS canonical linux < 6.8.0-106.106
Fix: upgrade to 6.8.0-106.106
Ubuntu:24.04:LTS canonical linux-aws < 6.8.0-1050.53
Fix: upgrade to 6.8.0-1050.53
Ubuntu:24.04:LTS canonical linux-azure < 6.8.0-1051.57
Fix: upgrade to 6.8.0-1051.57
Ubuntu:24.04:LTS canonical linux-azure-6.11 All versions
Ubuntu:24.04:LTS canonical linux-azure-fde < 6.8.0-1058.65
Fix: upgrade to 6.8.0-1058.65
Ubuntu:24.04:LTS canonical linux-azure-fde-6.17 All versions
Ubuntu:24.04:LTS canonical linux-azure-nvidia All versions
Ubuntu:24.04:LTS canonical linux-riscv All versions
Ubuntu:24.04:LTS canonical linux-xilinx < 6.8.0-1028.29
Fix: upgrade to 6.8.0-1028.29
Ubuntu:Nvidia-BlueField:24.04:LTS canonical linux-bluefield < 6.8.0-1017.21
Fix: upgrade to 6.8.0-1017.21
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-aws-fips < 6.8.0-1050.53+fips1
Fix: upgrade to 6.8.0-1050.53+fips1
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-azure-fips < 6.8.0-1052.58+fips1
Fix: upgrade to 6.8.0-1052.58+fips1
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-fips < 6.8.0-106.106+fips1
Fix: upgrade to 6.8.0-106.106+fips1
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-gcp-fips < 6.8.0-1052.55+fips1
Fix: upgrade to 6.8.0-1052.55+fips1
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-raspi-realtime < 6.8.0-2040.41
Fix: upgrade to 6.8.0-2040.41
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-realtime < 6.8.1-1045.46
Fix: upgrade to 6.8.1-1045.46
Ubuntu:25.10 canonical linux-azure-fde All versions
Root:Debian:11 debian rootio-linux < 5.10.249-1.root.io.52
Fix: upgrade to 5.10.249-1.root.io.52
Root:Ubuntu:24.04 canonical linux < 6.8.0-138.138.aikido.86
Fix: upgrade to 6.8.0-138.138.aikido.86
Root:Ubuntu:24.04 canonical rootio-linux < 6.8.0-138.138.aikido.86
Fix: upgrade to 6.8.0-138.138.aikido.86
Root:Ubuntu:22.04 – linux < 5.15.0-198.208.aikido.116
< 5.15.0-202.212.aikido.118
Fix: upgrade to 5.15.0-198.208.aikido.116
Root:Ubuntu:22.04 – rootio-linux < 5.15.0-198.208.aikido.116
< 5.15.0-202.212.aikido.118
Fix: upgrade to 5.15.0-198.208.aikido.116
Root:Ubuntu:24.04 – linux < 6.8.0-146.146.aikido.89
< 6.8.0-147.147.aikido.90
Fix: upgrade to 6.8.0-146.146.aikido.89
Root:Ubuntu:24.04 – rootio-linux < 6.8.0-146.146.aikido.89
< 6.8.0-147.147.aikido.90
Fix: upgrade to 6.8.0-146.146.aikido.89
Root:Debian:13 – linux < 6.12.113-1.aikido.163
Fix: upgrade to 6.12.113-1.aikido.163
Root:Debian:13 – rootio-linux < 6.12.113-1.aikido.163
Fix: upgrade to 6.12.113-1.aikido.163
Root:Debian:12 – linux < 6.1.190-1.aikido.167
Fix: upgrade to 6.1.190-1.aikido.167
Root:Debian:12 – rootio-linux < 6.1.190-1.aikido.167
Fix: upgrade to 6.1.190-1.aikido.167
Linux linux kernel >= 6.13.0, < 6.14.2
Fix: upgrade to 6.14.2
Original advisory text
CVE-2025-23130 in linux - Patched by Root
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid panic once fallocation fails for pinfile syzbot reports a f2fs bug as below: ------------[ cut here ]------------ kernel BUG at fs/f2fs/segment.c:2746! CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 RIP: 0010:get_new_segment fs/f2fs/segment.c:2746 [inline] RIP: 0010:new_curseg+0x1f52/0x1f70 fs/f2fs/segment.c:2876 Call Trace: <TASK> __allocate_new_segment+0x1ce/0x940 fs/f2fs/segment.c:3210 f2fs_allocate_new_section fs/f2fs/segment.c:3224 [inline] f2fs_allocate_pinning_section+0xfa/0x4e0 fs/f2fs/segment.c:3238 f2fs_expand_inode_data+0x696/0xca0 fs/f2fs/file.c:1830 f2fs_fallocate+0x537/0xa10 fs/f2fs/file.c:1940 vfs_fallocate+0x569/0x6e0 fs/open.c:327 do_vfs_ioctl+0x258c/0x2e40 fs/ioctl.c:885 __do_sys_ioctl fs/ioctl.c:904 [inline] __se_sys_ioctl+0x80/0x170 fs/ioctl.c:892 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Concurrent pinfile allocation may run out of free section, result in panic in get_new_segment(), let's expand pin_sem lock coverage to include f2fs_gc(), so that we can make sure to reclaim enough free space for following allocation. In addition, do below changes to enhance error path handling: - call f2fs_bug_on() only in non-pinfile allocation path in get_new_segment(). - call reset_curseg_fields() to reset all fields of curseg in new_curseg()
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
6.8 Medium
Exploitation
<1% chance of attack within 30 days
Timeline
Published16 Apr 2025
Updated30 Oct 2026
First seen6 Mar 2026
Track software like this
Free during beta