Description
An out-of-bounds (OOB) memory access flaw was found in fs/f2fs/node.c in the f2fs module in the Linux kernel in versions before 5.12.0-rc4. A bounds check failure allows a local attacker to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | kernel | kernel 5.12.0-rc4 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 5.10.38-1 | — |
| Debian 13 | linux | 5.10.38-1 | — |
| Debian 12 | linux | 5.10.38-1 | — |
| Debian 9 | linux-4.19 | 4.19.194-1~deb9u1 | DLA-2690-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | linux-raspi-realtime | No fix yet | — |
| Ubuntu 22.04 LTS | linux-realtime +1 | No fix yet | — |
| Ubuntu 20.04 LTS | linux | 5.4.0-77.86 | USN-5000-1 |
| Ubuntu 20.04 LTS | linux-aws +1 | 5.4.0-1051.53 | USN-5000-1 |
| Ubuntu 20.04 LTS | linux-aws-5.8 | 5.8.0-1041.43~20.04.1 | USN-5016-1 |
| Ubuntu 20.04 LTS | linux-azure-5.8 | 5.8.0-1039.42~20.04.1 | USN-5016-1 |
| Ubuntu 20.04 LTS | linux-bluefield | 5.4.0-1013.16 | — |
| Ubuntu 20.04 LTS | linux-gcp | 5.4.0-1046.49 | USN-5000-1 |
| Ubuntu 20.04 LTS | linux-gcp-5.8 | 5.8.0-1038.40~20.04.1 | USN-5016-1 |
| Ubuntu 20.04 LTS | linux-gke | 5.4.0-1046.48 | USN-5000-1 |
| Ubuntu 20.04 LTS | linux-gkeop | 5.4.0-1018.19 | USN-5000-1 |
| Ubuntu 20.04 LTS | linux-hwe-5.8 | 5.8.0-63.71~20.04.1 | USN-5016-1 |
| Ubuntu 20.04 LTS | linux-kvm | 5.4.0-1041.42 | USN-5000-2 |
| Ubuntu 20.04 LTS | linux-oem-5.10 | 5.10.0-1032.33 | USN-5001-1 |
| Ubuntu 20.04 LTS | linux-oracle | 5.4.0-1048.52 | USN-5000-1 |
| Ubuntu 20.04 LTS | linux-oracle-5.8 | 5.8.0-1037.38~20.04.1 | USN-5016-1 |
| Ubuntu 20.04 LTS | linux-raspi | 5.4.0-1038.41 | USN-5000-1 |
| Ubuntu 20.04 LTS | linux-riscv +3 | No fix yet | — |
| Ubuntu 18.04 LTS | linux | 4.15.0-173.182 | USN-5339-1 |
| Ubuntu 18.04 LTS | linux-aws | 4.15.0-1124.133 | USN-5339-1 |
| Ubuntu 18.04 LTS | linux-aws-5.4 +1 | 5.4.0-1051.53~18.04.1 | USN-5000-1 |
| Ubuntu 18.04 LTS | linux-azure-4.15 | 4.15.0-1134.147 | USN-5339-1 |
| Ubuntu 18.04 LTS | linux-dell300x | 4.15.0-1038.43 | USN-5339-1 |
| Ubuntu 18.04 LTS | linux-gcp +13 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp-4.15 | 4.15.0-1119.133 | USN-5339-1 |
| Ubuntu 18.04 LTS | linux-gcp-5.4 | 5.4.0-1046.49~18.04.1 | USN-5000-1 |
| Ubuntu 18.04 LTS | linux-gke-5.4 | 5.4.0-1046.48~18.04.1 | USN-5000-1 |
| Ubuntu 18.04 LTS | linux-gkeop-5.4 | 5.4.0-1018.19~18.04.1 | USN-5000-1 |
| Ubuntu 18.04 LTS | linux-hwe-5.4 | 5.4.0-77.86~18.04.1 | USN-5000-1 |
| Ubuntu 18.04 LTS | linux-kvm | 4.15.0-1110.113 | USN-5339-1 |
| Ubuntu 18.04 LTS | linux-oracle | 4.15.0-1090.99 | USN-5339-1 |
| Ubuntu 18.04 LTS | linux-oracle-5.4 | 5.4.0-1048.52~18.04.1 | USN-5000-1 |
| Ubuntu 18.04 LTS | linux-raspi-5.4 | 5.4.0-1038.41~18.04.1 | USN-5000-1 |
| Ubuntu 18.04 LTS | linux-raspi2 | 4.15.0-1106.113 | USN-5339-1 |
| Ubuntu 18.04 LTS | linux-snapdragon | 4.15.0-1123.132 | USN-5339-1 |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
Show 9 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro FIPS 20.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 18.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 16.04 LTS | linux-fips | No fix yet | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-aws-fips | 5.4.0-1069.73+fips2 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-azure-fips | 5.4.0-1073.76+fips1 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-fips | 5.4.0-1028.32 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-gcp-fips | 5.4.0-1067.71~20.04.1 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-aws-fips | 4.15.0-2064.67 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-azure-fips | 4.15.0-2046.50 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-fips | 4.15.0-1081.90 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-gcp-fips | 4.15.0-2029.32 | — |
| Ubuntu Pro FIPS-updates 16.04 LTS | linux-fips | 4.4.0-1072.78 | — |
| Ubuntu Pro 20.04 LTS | linux-azure-fde-5.15 | 5.15.0-1114.123~20.04.1 | — |
| Ubuntu Pro 16.04 LTS | linux | 4.4.0-222.255 | USN-5343-1 |
| Ubuntu Pro 16.04 LTS | linux-aws | 4.4.0-1138.152 | USN-5343-1 |
| Ubuntu Pro 16.04 LTS | linux-aws-hwe | 4.15.0-1124.133~16.04.1 | USN-5339-1 |
| Ubuntu Pro 16.04 LTS | linux-azure | 4.15.0-1134.147~16.04.1 | USN-5339-1 |
| Ubuntu Pro 16.04 LTS | linux-gcp | 4.15.0-1119.133~16.04.1 | USN-5339-1 |
| Ubuntu Pro 16.04 LTS | linux-hwe | 4.15.0-173.182~16.04.1 | USN-5339-1 |
| Ubuntu Pro 16.04 LTS | linux-kvm | 4.4.0-1103.112 | USN-5343-1 |
| Ubuntu Pro 16.04 LTS | linux-oracle | 4.15.0-1090.99~16.04.1 | USN-5339-1 |
| Ubuntu Pro 14.04 LTS | linux | No fix yet | — |
| Ubuntu Pro 14.04 LTS | linux-aws | 4.4.0-1102.107 | USN-5343-1 |
| Ubuntu Pro 14.04 LTS | linux-azure | 4.15.0-1134.147~14.04.1 | USN-5339-1 |
| Ubuntu Pro 14.04 LTS | linux-lts-xenial | 4.4.0-222.255~14.04.1 | USN-5343-1 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 2 (CBL-Mariner) | kernel | 5.10.78.1-1 | — |
Advisories 10
- USN-5339-1 linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-hwe, linux-gcp, linux-gcp-4.15, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities Ubuntu Security Notices (USN) · Sep 10, 2026
- USN-5343-1 linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities Ubuntu Security Notices (USN) · Jun 29, 2026
- USN-5016-1 linux, linux-aws, linux-aws-5.8, linux-azure, linux-azure-5.8, linux-gcp, linux-gcp-5.8, linux-hwe-5.8, linux-kvm, linux-oracle, linux-oracle-5.8, linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Jun 3, 2026
- USN-5000-1 linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-gke, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities Ubuntu Security Notices (USN) · Jun 3, 2026
- USN-5001-1 linux-oem-5.10 vulnerabilities Ubuntu Security Notices (USN) · Jun 3, 2026
- USN-5000-2 linux-kvm vulnerabilities Ubuntu Security Notices (USN) · Jun 3, 2026
- DLA-2690-1 linux-4.19 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- ICSA-24-319-06 Siemens SCALANCE M-800 Family CISA ICS & IT advisories · May 6, 2025
- NCSC-2024-0433 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Nov 12, 2024
- SSA-354112 SSA-354112: Multiple Vulnerabilities in SCALANCE M-800 Family Before V8.2 Siemens ProductCERT · Nov 12, 2024
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1944298
- https://www.openwall.com/lists/oss-security/2021/03/28/2
- https://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg2520013.html
- [oss-security] 20210508 Re: Linux kernel: f2fs: out-of-bounds memory access bug mailing-list
- https://security.netapp.com/advisory/ntap-20210611-0007/
- [debian-lts-announce] 20210623 [SECURITY] [DLA 2690-1] linux-4.19 security update mailing-list