Description
In the Linux kernel, the following vulnerability has been resolved:
f2fs: remove clear SB_INLINECRYPT flag in default_options
In f2fs_remount, SB_INLINECRYPT flag will be clear and re-set.
If create new file or open file during this gap, these files
will not use inlinecrypt. Worse case, it may lead to data
corruption if wrappedkey_v0 is enable.
Thread A: Thread B:
-f2fs_remount -f2fs_file_open or f2fs_new_inode
-default_options
<- clear SB_INLINECRYPT flag
-fscrypt_select_encryption_impl
-parse_options
<- set SB_INLINECRYPT again
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 3.8 | 5.10.221 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 6.9.7-1 | — |
| Debian 13 | linux | 6.9.7-1 | — |
| Debian 12 | linux | 6.1.99-1 | DSA-5731-1 |
| Debian 11 | linux | 5.10.221-1 | DSA-5730-1 |
| Debian 11 | linux-6.1 | 6.1.119-1~deb11u1 | DLA-4008-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 22.04 LTS | linux-bluefield | 5.15.0-1052.54 | — |
| Ubuntu 24.04 LTS | linux | 6.8.0-44.44 | USN-6999-1 |
| Ubuntu 24.04 LTS | linux-aws | 6.8.0-1015.16 | USN-6999-1 |
| Ubuntu 24.04 LTS | linux-gcp +1 | 6.8.0-1014.16 | USN-7004-1, USN-6999-1 |
| Ubuntu 24.04 LTS | linux-gke | 6.8.0-1010.13 | USN-6999-1 |
| Ubuntu 24.04 LTS | linux-ibm +2 | 6.8.0-1012.12 | USN-6999-1 |
| Ubuntu 24.04 LTS | linux-nvidia | 6.8.0-1013.14 | USN-7005-1 |
| Ubuntu 24.04 LTS | linux-nvidia-lowlatency | 6.8.0-1013.14.1 | USN-7005-1 |
| Ubuntu 24.04 LTS | linux-raspi | 6.8.0-1011.12 | USN-6999-2 |
| Ubuntu 24.04 LTS | linux-riscv +1 | 6.8.0-44.44.1 | USN-6999-1 |
| Ubuntu 22.04 LTS | linux +1 | 5.15.0-121.131 | USN-7007-3, USN-7007-1 |
| Ubuntu 22.04 LTS | linux-aws | 5.15.0-1069.75 | USN-7007-1 |
| Ubuntu 22.04 LTS | linux-aws-6.8 | 6.8.0-1015.16~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-azure | 5.15.0-1072.81 | USN-7009-1 |
| Ubuntu 22.04 LTS | linux-azure-fde | 5.15.0-1072.81.1 | USN-7009-1 |
| Ubuntu 22.04 LTS | linux-gcp | 5.15.0-1068.76 | USN-7007-1 |
| Ubuntu 22.04 LTS | linux-gcp-6.8 +1 | 6.8.0-1014.16~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-gke | 5.15.0-1066.72 | USN-7007-1 |
| Ubuntu 22.04 LTS | linux-gkeop | 5.15.0-1052.59 | USN-7007-1 |
| Ubuntu 22.04 LTS | linux-hwe-6.8 | 6.8.0-45.45~22.04.1 | USN-7029-1 |
| Ubuntu 22.04 LTS | linux-ibm +1 | 5.15.0-1062.65 | USN-7007-1 |
| Ubuntu 22.04 LTS | linux-ibm-6.8 +1 | 6.8.0-1012.12~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-intel-iotg | 5.15.0-1064.70 | USN-7007-1 |
| Ubuntu 22.04 LTS | linux-kvm | 5.15.0-1066.71 | USN-7007-1 |
| Ubuntu 22.04 LTS | linux-nvidia | 5.15.0-1064.65 | USN-7007-1 |
| Ubuntu 22.04 LTS | linux-nvidia-6.8 | 6.8.0-1013.14~22.04.1 | USN-7005-2 |
| Ubuntu 22.04 LTS | linux-nvidia-tegra | 5.15.0-1028.28 | — |
| Ubuntu 22.04 LTS | linux-nvidia-tegra-igx | 5.15.0-1016.16 | — |
| Ubuntu 22.04 LTS | linux-oracle | 5.15.0-1067.73 | USN-7007-1 |
| Ubuntu 22.04 LTS | linux-riscv +31 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-riscv-6.8 +1 | 6.8.0-44.44.1~22.04.1 | USN-7008-1 |
| Ubuntu 22.04 LTS | linux-xilinx-zynqmp | 5.15.0-1035.39 | USN-7019-1 |
| Ubuntu 20.04 LTS | linux-aws-5.15 | 5.15.0-1069.75~20.04.1 | USN-7007-1 |
| Ubuntu 20.04 LTS | linux-azure-5.15 | 5.15.0-1072.81~20.04.1 | USN-7009-1 |
| Ubuntu 20.04 LTS | linux-azure-fde-5.15 | 5.15.0-1072.81~20.04.1.1 | USN-7009-2 |
| Ubuntu 20.04 LTS | linux-gcp-5.15 | 5.15.0-1068.76~20.04.1 | USN-7007-1 |
| Ubuntu 20.04 LTS | linux-gke +27 | No fix yet | — |
| Ubuntu 20.04 LTS | linux-gkeop-5.15 | 5.15.0-1052.59~20.04.1 | USN-7007-1 |
| Ubuntu 20.04 LTS | linux-hwe-5.15 +1 | 5.15.0-121.131~20.04.1 | USN-7007-3, USN-7007-1 |
| Ubuntu 20.04 LTS | linux-ibm-5.15 | 5.15.0-1062.65~20.04.1 | USN-7007-2 |
| Ubuntu 20.04 LTS | linux-intel-iotg-5.15 | 5.15.0-1064.70~20.04.1 | USN-7007-1 |
| Ubuntu 20.04 LTS | linux-nvidia-tegra-5.15 | 5.15.0-1030.30~20.04.1 | — |
| Ubuntu 20.04 LTS | linux-oracle-5.15 | 5.15.0-1067.73~20.04.1 | USN-7007-2 |
| Ubuntu 20.04 LTS | linux-riscv-5.15 | 5.15.0-1065.69~20.04.1 | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
Show 16 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | 6.8.0-2010.10 | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime | 6.8.1-1008.8 | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-intel-iot-realtime | 5.15.0-1063.65 | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime | 5.15.0-1070.78 | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime-6.8 | 6.8.1-1008.8~22.04.1 | — |
| Ubuntu Pro FIPS 20.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 18.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 16.04 LTS | linux-fips | No fix yet | — |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-fips | 6.8.0-78.78+fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-aws-fips | 5.15.0-1069.75+fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-azure-fips | 5.15.0-1072.81+fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-fips | 5.15.0-121.131+fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-gcp-fips | 5.15.0-1068.76+fips1 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-updates 16.04 LTS | linux-fips | No fix yet | — |
| Ubuntu Pro FIPS-preview 22.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | linux +10 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | linux +12 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | linux +7 | No fix yet | — |
| Ubuntu Pro 14.04 LTS | linux +3 | No fix yet | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | bpftool +13 | 5.15.0-210.163.7.el9uek | ELSA-2024-12618 |
Advisories 22
- WID-SEC-2024-1607 Linux Kernel: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 5, 2026
- USN-7007-1 linux, linux-aws, linux-aws-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-nvidia, linux-oracle, linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Oct 26, 2026
- USN-6999-1 linux, linux-aws, linux-gcp, linux-gke, linux-ibm, linux-lowlatency, linux-oem-6.8, linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Oct 26, 2026
- USN-7009-1 linux-azure, linux-azure-5.15, linux-azure-fde vulnerabilities Ubuntu Security Notices (USN) · Oct 26, 2026
- USN-7007-3 linux-lowlatency, linux-lowlatency-hwe-5.15 vulnerabilities Ubuntu Security Notices (USN) · Oct 26, 2026
- USN-7029-1 linux-hwe-6.8 Ubuntu Security Notices (USN) · Oct 26, 2026
- USN-7005-1 linux-nvidia, linux-nvidia-lowlatency vulnerabilities Ubuntu Security Notices (USN) · Oct 26, 2026
- USN-7005-2 linux-nvidia-6.8 vulnerabilities Ubuntu Security Notices (USN) · Oct 26, 2026
- USN-7004-1 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Oct 26, 2026
- USN-7008-1 linux-lowlatency-hwe-6.8 vulnerabilities Ubuntu Security Notices (USN) · Oct 26, 2026
- USN-7019-1 linux-xilinx-zynqmp vulnerabilities Ubuntu Security Notices (USN) · Oct 26, 2026
- USN-6999-2 linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Oct 26, 2026
- USN-7007-2 linux-ibm-5.15, linux-oracle-5.15 vulnerabilities Ubuntu Security Notices (USN) · Oct 26, 2026
- SSA-265688 SSA-265688: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1 Siemens ProductCERT · Oct 13, 2026
- USN-7009-2 linux-azure-fde-5.15 vulnerabilities Ubuntu Security Notices (USN) · Aug 6, 2026
- ICSA-24-102-01 Siemens SIMATIC S7-1500 TM MFP CISA ICS & IT advisories · May 14, 2026
- DLA-4008-1 linux-6.1 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-5731-1 linux - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-5730-1 linux - security update Debian Security (DSA / DLA) · Mar 9, 2026
- ICSA-25-226-07 Siemens Third-Party Components in SINEC OS CISA ICS & IT advisories · Feb 25, 2026
- SSA-355557 SSA-355557: Multiple Vulnerabilities in Third-Party Components in SINEC OS before V3.2 Siemens ProductCERT · Feb 24, 2026
- ELSA-2024-12618 Important: Unbreakable Enterprise kernel security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Sep 12, 2024
References
- https://git.kernel.org/stable/c/38a82c8d00638bb642bef787eb1d5e0e4d3b7d71
- https://git.kernel.org/stable/c/724429db09e21ee153fef35e34342279d33df6ae
- https://git.kernel.org/stable/c/a9cea0489c562c97cd56bb345e78939f9909e7f4
- https://git.kernel.org/stable/c/eddeb8d941d5be11a9da5637dbe81ac37e8449a2
- https://git.kernel.org/stable/c/ae39c8ec4250d2a35ddaab1c40faacfec306ff66
- https://git.kernel.org/stable/c/ac5eecf481c29942eb9a862e758c0c8b68090c33