7.1

CVE-2026-89840

f2fs: validate MOVE_RANGE destination size

In the Linux kernel, the following vulnerability has been resolved:

f2fs: validate MOVE_RANGE destination size

F2FS_IOC_MOVE_RANGE checks the source range, but not the destination end
before updating i_size. A source hole can expose this: __clone_blkaddrs()
skips NULL_ADDR entries and returns success, so the caller can still extend
the destination inode with unchecked pos_out + len.

Reject destination overflow and use inode_newsize_ok() before extending
the destination inode.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 4dd6f977fc778e5a0da604e5f8cb2f36d163d27b
Version < bca61ee5192ea47003722486ae9588a2a4bb47b6
Status affected
Version 4dd6f977fc778e5a0da604e5f8cb2f36d163d27b
Version < db13064669526494cd78ba3a4394063b740e940c
Status affected
Version 4dd6f977fc778e5a0da604e5f8cb2f36d163d27b
Version < dcae1eeda53149f219dd6af93b3083b7271c1c63
Status affected
Version 4dd6f977fc778e5a0da604e5f8cb2f36d163d27b
Version < e533889fc26aea0cd83c90327063f272061dd820
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.8
Status affected
Version 0
Version < 4.8
Status unaffected
Version <= 6.12.*
Version 6.12.112
Status unaffected
Version <= 6.18.*
Version 6.18.53
Status unaffected
Version <= 7.2.*
Version 7.2.5
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.14% 0.038
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.1 1.8 5.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/dcae1eeda53149f219dd6af93b3083b7271c1c63
https://git.kernel.org/stable/c/e533889fc26aea0cd83c90327063f272061dd820
https://git.kernel.org/stable/c/db13064669526494cd78ba3a4394063b740e940c
https://git.kernel.org/stable/c/bca61ee5192ea47003722486ae9588a2a4bb47b6