Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.8
CVE-2025-40054: Linux kernel F2FS file system may cause system crash
CVE-2025-40054 · published 1 year ago
Summary
The F2FS storage driver in the Linux kernel (used in Debian and Canonical Linux builds) has a bug that can accidentally free memory still in use, leading to a kernel panic and system crash. This can happen during normal write‑back operations on the file system. Updating the kernel to the latest patched version resolves the issue.
What to do
- Update debian rootio-linux to version 6.12.63-1.root.io.64.
- Update debian rootio-linux to version 6.1.164-1.root.io.108.
- Update debian rootio-linux to version 6.12.88-1.root.io.124.
- Update debian linux to version 6.12.105-1.
- Update canonical linux-aws-6.17 to version 6.17.0-1007.7~24.04.1.
- Update canonical linux-gcp-6.17 to version 6.17.0-1008.8~24.04.1.
- Update canonical linux-nvidia-6.17 to version 6.17.0-1008.8.
- Update canonical linux-oem-6.17 to version 6.17.0-1011.11.
- Update canonical linux-oracle-6.17 to version 6.17.0-1007.7~24.04.1.
- Update canonical linux-realtime-6.17 to version 6.17.0-1006.7~24.04.1.
- Update canonical linux to version 6.17.0-14.14.
- Update canonical linux-aws to version 6.17.0-1007.7.
- Update canonical linux-azure to version 6.17.0-1008.8.
- Update canonical linux-gcp to version 6.17.0-1007.7.
- Update canonical linux-oracle to version 6.17.0-1007.7.
- Update canonical linux-raspi to version 6.17.0-1008.8.
- Update canonical linux-realtime to version 6.17.0-1006.7.
- Update canonical linux-riscv to version 6.17.0-14.14.1.
- Update debian linux to version 6.17.6-1.
- Update debian rootio-linux to version 5.10.247-1.root.io.42.
- Update debian rootio-linux to version 6.12.94-1.root.io.141.
- Update canonical linux to version 6.8.0-138.138.aikido.86.
- Update canonical rootio-linux to version 6.8.0-138.138.aikido.86.
- Update debian linux to version 6.1.187-1.
- Update debian linux-6.12 to version 6.12.107-1~deb12u1.
- Update canonical linux-nvidia-tegra to version 6.8.0-1035.38.
- Update bellsoft linux-lts to version 6.12.111-r0.
- Update bellsoft linux-lts to version 6.18.35-r1.
- Update bellsoft linux-lts to version 6.1.189-r0.
- Update linux to version 6.8.0-146.146.aikido.89.
- Update rootio-linux to version 6.8.0-146.146.aikido.89.
- Update linux to version 5.15.0-198.208.aikido.116.
- Update rootio-linux to version 5.15.0-198.208.aikido.116.
- Update linux to version 6.8.0-147.147.aikido.90.
- Update rootio-linux to version 6.8.0-147.147.aikido.90.
- Update linux to version 6.12.113-1.aikido.163.
- Update rootio-linux to version 6.12.113-1.aikido.163.
- Update linux to version 6.1.190-1.aikido.167.
- Update rootio-linux to version 6.1.190-1.aikido.167.
- Update linux kernel to version 6.17.3.
- Update linux to version 5.15.0-202.212.aikido.118.
- Update rootio-linux to version 5.15.0-202.212.aikido.118.
- Update linux to version 6.12.115-2.aikido.164.
- Update rootio-linux to version 6.12.115-2.aikido.164.
- Update canonical linux-aws-5.15 to version 5.15.0-1119.126~20.04.1.
- Update canonical linux-azure-5.15 to version 5.15.0-1125.134~20.04.1.
- Update canonical linux-azure-fde-5.15 to version 5.15.0-1124.133~20.04.1.
- Update canonical linux-gcp-5.15 to version 5.15.0-1120.130~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-202.212~20.04.1.
- Update canonical linux-ibm-5.15 to version 5.15.0-1113.117~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1114.120~20.04.1.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-197.207~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1070.72~20.04.1.
- Update canonical linux-oracle-5.15 to version 5.15.0-1116.122~20.04.1.
- Update canonical linux-riscv-5.15 to version 5.15.0-1113.117~20.04.2.
- Update canonical linux to version 5.15.0-202.212.
- Update canonical linux-aws to version 5.15.0-1119.126.
- Update canonical linux-azure to version 5.15.0-1125.134.
- Update canonical linux-azure-fde to version 5.15.0-1124.133.
- Update canonical linux-gcp to version 5.15.0-1120.130.
- Update canonical linux-gke to version 5.15.0-1115.121.
- Update canonical linux-gkeop to version 5.15.0-1102.110.
- Update canonical linux-ibm to version 5.15.0-1113.117.
- Update canonical linux-intel-iotg to version 5.15.0-1114.120.
- Update canonical linux-kvm to version 5.15.0-1111.116.
- Update canonical linux-lowlatency to version 5.15.0-197.207.
- Update canonical linux-nvidia to version 5.15.0-1114.115.
- Update canonical linux-nvidia-tegra to version 5.15.0-1070.72.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1059.59.
- Update canonical linux-oracle to version 5.15.0-1116.122.
- Update canonical linux-bluefield to version 5.15.0-1103.105.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1111.115.
- Update canonical linux-realtime to version 5.15.0-1118.127.
- Update canonical linux-aws-fips to version 5.15.0-1119.126+fips1.
- Update canonical linux-azure-fips to version 5.15.0-1125.134+fips1.
- Update canonical linux-fips to version 5.15.0-202.212+fips1.
- Update canonical linux-gcp-fips to version 5.15.0-1120.130+fips1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Root:Debian:13 | debian | rootio-linux |
< 6.12.63-1.root.io.64 < 6.12.88-1.root.io.124 < 6.12.94-1.root.io.141 Fix: upgrade to 6.12.63-1.root.io.64
|
| Root:Debian:12 | debian | rootio-linux |
< 6.1.164-1.root.io.108 Fix: upgrade to 6.1.164-1.root.io.108
|
| Debian:13 | debian | linux |
< 6.12.105-1 Fix: upgrade to 6.12.105-1
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1119.126~20.04.1 Fix: upgrade to 5.15.0-1119.126~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1125.134~20.04.1 Fix: upgrade to 5.15.0-1125.134~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1120.130~20.04.1 Fix: upgrade to 5.15.0-1120.130~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-202.212~20.04.1 Fix: upgrade to 5.15.0-202.212~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1113.117~20.04.1 Fix: upgrade to 5.15.0-1113.117~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1114.120~20.04.1 Fix: upgrade to 5.15.0-1114.120~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-197.207~20.04.1 Fix: upgrade to 5.15.0-197.207~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1070.72~20.04.1 Fix: upgrade to 5.15.0-1070.72~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
Showing 50 of 187. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1116.122~20.04.1 Fix: upgrade to 5.15.0-1116.122~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1113.117~20.04.2 Fix: upgrade to 5.15.0-1113.117~20.04.2
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-202.212 Fix: upgrade to 5.15.0-202.212
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1119.126 Fix: upgrade to 5.15.0-1119.126
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1113.117 Fix: upgrade to 5.15.0-1113.117
|
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1114.120 Fix: upgrade to 5.15.0-1114.120
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1111.116 Fix: upgrade to 5.15.0-1111.116
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-197.207 Fix: upgrade to 5.15.0-197.207
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1114.115 Fix: upgrade to 5.15.0-1114.115
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1070.72 Fix: upgrade to 5.15.0-1070.72
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1059.59 Fix: upgrade to 5.15.0-1059.59
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1116.122 Fix: upgrade to 5.15.0-1116.122
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-raspi | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp | All versions |
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1103.105 Fix: upgrade to 5.15.0-1103.105
|
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.17 |
< 6.17.0-1007.7~24.04.1 Fix: upgrade to 6.17.0-1007.7~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.17 |
< 6.17.0-1008.8~24.04.1 Fix: upgrade to 6.17.0-1008.8~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.17 |
< 6.17.0-1008.8 Fix: upgrade to 6.17.0-1008.8
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.17 |
< 6.17.0-1011.11 Fix: upgrade to 6.17.0-1011.11
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.17 |
< 6.17.0-1007.7~24.04.1 Fix: upgrade to 6.17.0-1007.7~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-xilinx | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.17 |
< 6.17.0-1006.7~24.04.1 Fix: upgrade to 6.17.0-1006.7~24.04.1
|
| Ubuntu:25.10 | canonical | linux |
< 6.17.0-14.14 Fix: upgrade to 6.17.0-14.14
|
| Ubuntu:25.10 | canonical | linux-aws |
< 6.17.0-1007.7 Fix: upgrade to 6.17.0-1007.7
|
| Ubuntu:25.10 | canonical | linux-azure |
< 6.17.0-1008.8 Fix: upgrade to 6.17.0-1008.8
|
| Ubuntu:25.10 | canonical | linux-gcp |
< 6.17.0-1007.7 Fix: upgrade to 6.17.0-1007.7
|
| Ubuntu:25.10 | canonical | linux-oracle |
< 6.17.0-1007.7 Fix: upgrade to 6.17.0-1007.7
|
| Ubuntu:25.10 | canonical | linux-raspi |
< 6.17.0-1008.8 Fix: upgrade to 6.17.0-1008.8
|
| Ubuntu:25.10 | canonical | linux-realtime |
< 6.17.0-1006.7 Fix: upgrade to 6.17.0-1006.7
|
| Ubuntu:25.10 | canonical | linux-riscv |
< 6.17.0-14.14.1 Fix: upgrade to 6.17.0-14.14.1
|
| – | linux | linux |
< 1f7b44b4a2b2939f08b279cbb9e6b5dcb8ffea32 < 01118321e0c8a5f3ece57d0d377bfc92d83cd210 5.5 |
| Debian:11 | debian | linux | All versions |
| Debian:12 | debian | linux |
< 6.1.187-1 Fix: upgrade to 6.1.187-1
|
| Debian:14 | debian | linux |
< 6.17.6-1 Fix: upgrade to 6.17.6-1
|
| Root:Debian:11 | debian | rootio-linux |
< 5.10.247-1.root.io.42 Fix: upgrade to 5.10.247-1.root.io.42
|
| Root:Ubuntu:24.04 | canonical | linux |
< 6.8.0-138.138.aikido.86 Fix: upgrade to 6.8.0-138.138.aikido.86
|
| Root:Ubuntu:24.04 | canonical | rootio-linux |
< 6.8.0-138.138.aikido.86 Fix: upgrade to 6.8.0-138.138.aikido.86
|
| Debian:12 | debian | linux-6.12 |
< 6.12.107-1~deb12u1 Fix: upgrade to 6.12.107-1~deb12u1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-tegra |
< 6.8.0-1035.38 Fix: upgrade to 6.8.0-1035.38
|
| Alpaquita:23 | bellsoft | linux-lts |
>= 6.1.156-r0 >= 6.1.182-r0, < 6.1.189-r0 Fix: upgrade to 6.1.189-r0
|
| Alpaquita:25 | bellsoft | linux-lts |
>= 6.12.103-r0, < 6.12.111-r0 Fix: upgrade to 6.12.111-r0
|
| Alpaquita:stream | bellsoft | linux-lts |
>= 6.12.92-r1, < 6.18.35-r1 Fix: upgrade to 6.18.35-r1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-fde-5.15 |
< 5.15.0-1124.133~20.04.1 Fix: upgrade to 5.15.0-1124.133~20.04.1
|
| Root:Ubuntu:24.04 | – | linux |
< 6.8.0-146.146.aikido.89 < 6.8.0-147.147.aikido.90 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| Root:Ubuntu:24.04 | – | rootio-linux |
< 6.8.0-146.146.aikido.89 < 6.8.0-147.147.aikido.90 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| Root:Ubuntu:22.04 | – | linux |
< 5.15.0-198.208.aikido.116 < 5.15.0-202.212.aikido.118 Fix: upgrade to 5.15.0-198.208.aikido.116
|
| Root:Ubuntu:22.04 | – | rootio-linux |
< 5.15.0-198.208.aikido.116 < 5.15.0-202.212.aikido.118 Fix: upgrade to 5.15.0-198.208.aikido.116
|
| Ubuntu:24.04:LTS | canonical | linux-vmware | All versions |
| Root:Debian:13 | – | linux |
< 6.12.113-1.aikido.163 < 6.12.115-2.aikido.164 Fix: upgrade to 6.12.113-1.aikido.163
|
| Root:Debian:13 | – | rootio-linux |
< 6.12.113-1.aikido.163 < 6.12.115-2.aikido.164 Fix: upgrade to 6.12.113-1.aikido.163
|
| Root:Debian:12 | – | linux |
< 6.1.190-1.aikido.167 Fix: upgrade to 6.1.190-1.aikido.167
|
| Root:Debian:12 | – | rootio-linux |
< 6.1.190-1.aikido.167 Fix: upgrade to 6.1.190-1.aikido.167
|
| Linux | linux | kernel |
>= 6.13.0, < 6.17.3 Fix: upgrade to 6.17.3
|
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1125.134 Fix: upgrade to 5.15.0-1125.134
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1124.133 Fix: upgrade to 5.15.0-1124.133
|
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1120.130 Fix: upgrade to 5.15.0-1120.130
|
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1115.121 Fix: upgrade to 5.15.0-1115.121
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1102.110 Fix: upgrade to 5.15.0-1102.110
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1111.115 Fix: upgrade to 5.15.0-1111.115
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1118.127 Fix: upgrade to 5.15.0-1118.127
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips |
< 5.15.0-1119.126+fips1 Fix: upgrade to 5.15.0-1119.126+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-azure-fips |
< 5.15.0-1125.134+fips1 Fix: upgrade to 5.15.0-1125.134+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips |
< 5.15.0-202.212+fips1 Fix: upgrade to 5.15.0-202.212+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips |
< 5.15.0-1120.130+fips1 Fix: upgrade to 5.15.0-1120.130+fips1
|
Original advisory text
CVE-2025-40054 in linux - Patched by Root
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix UAF issue in f2fs_merge_page_bio() As JY reported in bugzilla [1], Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 pc : [0xffffffe51d249484] f2fs_is_cp_guaranteed+0x70/0x98 lr : [0xffffffe51d24adbc] f2fs_merge_page_bio+0x520/0x6d4 CPU: 3 UID: 0 PID: 6790 Comm: kworker/u16:3 Tainted: P B W OE 6.12.30-android16-5-maybe-dirty-4k #1 5f7701c9cbf727d1eebe77c89bbbeb3371e895e5 Tainted: [P]=PROPRIETARY_MODULE, [B]=BAD_PAGE, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE Workqueue: writeback wb_workfn (flush-254:49) Call trace: f2fs_is_cp_guaranteed+0x70/0x98 f2fs_inplace_write_data+0x174/0x2f4 f2fs_do_write_data_page+0x214/0x81c f2fs_write_single_data_page+0x28c/0x764 f2fs_write_data_pages+0x78c/0xce4 do_writepages+0xe8/0x2fc __writeback_single_inode+0x4c/0x4b4 writeback_sb_inodes+0x314/0x540 __writeback_inodes_wb+0xa4/0xf4 wb_writeback+0x160/0x448 wb_workfn+0x2f0/0x5dc process_scheduled_works+0x1c8/0x458 worker_thread+0x334/0x3f0 kthread+0x118/0x1ac ret_from_fork+0x10/0x20 [1] https://bugzilla.kernel.org/show_bug.cgi?id=220575 The panic was caused by UAF issue w/ below race condition: kworker - writepages - f2fs_write_cache_pages - f2fs_write_single_data_page - f2fs_do_write_data_page - f2fs_inplace_write_data - f2fs_merge_page_bio - add_inu_page : cache page #1 into bio & cache bio in io->bio_list - f2fs_write_single_data_page - f2fs_do_write_data_page - f2fs_inplace_write_data - f2fs_merge_page_bio - add_inu_page : cache page #2 into bio which is linked in io->bio_list write - f2fs_write_begin : write page #1 - f2fs_folio_wait_writeback - f2fs_submit_merged_ipu_write - f2fs_submit_write_bio : submit bio which inclues page #1 and #2 software IRQ - f2fs_write_end_io - fscrypt_free_bounce_page : freed bounced page which belongs to page #2 - inc_page_count( , WB_DATA_TYPE(data_folio), false) : data_folio points to fio->encrypted_page the bounced page can be freed before accessing it in f2fs_is_cp_guarantee() It can reproduce w/ below testcase: Run below script in shell #1: for ((i=1;i>0;i++)) do xfs_io -f /mnt/f2fs/enc/file \ -c "pwrite 0 32k" -c "fdatasync" Run below script in shell #2: for ((i=1;i>0;i++)) do xfs_io -f /mnt/f2fs/enc/file \ -c "pwrite 0 32k" -c "fdatasync" So, in f2fs_merge_page_bio(), let's avoid using fio->encrypted_page after commit page into internal ipu cache.
References
- https://docs.bell-sw.com/security/cves/CVE-2025-40054 Vendor Advisory
- https://git.kernel.org/stable/c/68e094232dfe5027c4fd2dcded93d2d6800bae04 URL
- https://git.kernel.org/stable/c/1f7b44b4a2b2939f08b279cbb9e6b5dcb8ffea32 URL
- https://git.kernel.org/stable/c/410337c2301ae78a081e1b5ebbe8ec374fef4cb6 URL
- https://git.kernel.org/stable/c/7dd611131d82d7fc4212b555eb1103160bdad302 URL
- https://git.kernel.org/stable/c/e193d8953647c8b575830852aa5ea0995b98d2b1 URL
- https://security-tracker.debian.org/tracker/CVE-2025-40054 Vendor Advisory
- https://git.kernel.org/stable/c/01118321e0c8a5f3ece57d0d377bfc92d83cd210 Third Party Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40054... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-40054 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://ubuntu.com/security/CVE-2025-40054 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-40054 Third Party Advisory
- https://git.kernel.org/linus/edf7e9040fc52c922db947f9c6c36f07377c52ea Third Party Advisory
- https://ubuntu.com/security/notices/USN-8029-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8030-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8029-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8048-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8029-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8781-1 Vendor Advisory
- https://git.kernel.org/stable/c/edf7e9040fc52c922db947f9c6c36f07377c52ea Third Party Advisory
- https://ubuntu.com/security/notices/USN-8961-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8963-1 Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Severity
6.8
Medium
Timeline
Published28 Oct 2025
Updated4 Nov 2026
First seen6 Mar 2026
Sources
DEBIAN-CVE-2025-40054 · OSV
CVE-2025-40054 · MITRE
CVE-2025-40054 · NVD
UBUNTU-CVE-2025-40054 · OSV
BELL-CVE-2025-40054 · OSV
CVE-2025-40054 · OSV
Track software like this
Free during beta