CVE-2025-38218: f2fs: fix to do sanity check on sit_bitmap_size
Published Jul 4, 2025
·Updated
f2fs: fix to do sanity check on sitbitmapsize
Affected Software
10 affected componentsFixes available
Linux Kernel
Microsoft azl3 kernel 6.6.92.2-2
Linux Linux kernel>=3.8<5.10.239
Linux Linux kernel>=5.11<5.15.186
Linux Linux kernel>=5.16<6.1.142
Linux Linux kernel>=6.2<6.6.95
Linux Linux kernel>=6.7<6.12.35
Linux Linux kernel>=6.13<6.15.4
Debian Debian Linux=11.0
debian/linux
6.1.176-16.1.190-16.12.107-16.12.113-17.2.12-17.2.13-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Jul 4, 2025
CVE Published
via MITRE·01:37 PM
Data Sourced
via MITRE·01:37 PM
DescriptionSeverity
Data Sourced
via NVD·02:15 PM
RemedyDescriptionSeverityAffected Software
Aug 7, 2025
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-38218?
The severity of CVE-2025-38218 is classified as high due to the potential for kernel panic and system instability.
2
How do I fix CVE-2025-38218?
To fix CVE-2025-38218, upgrade to the latest version of the Linux kernel that includes the patch addressing this vulnerability.
3
What systems are affected by CVE-2025-38218?
CVE-2025-38218 affects Linux kernel implementations that utilize f2fs filesystem.
4
What impact does CVE-2025-38218 have on system security?
CVE-2025-38218 can lead to system crashes, potential data loss, and compromise the overall stability of affected systems.
5
When was CVE-2025-38218 disclosed?
CVE-2025-38218 was disclosed in 2025 as part of a routine update to the Linux kernel addressing identified vulnerabilities.