CVE-2025-71069: f2fs: invalidate dentry cache on failed whiteout creation
f2fs: invalidate dentry cache on failed whiteout creation
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Compensating control
In f2fs_rename, explicitly invalidate old_dentry and new_dentry when f2fs_add_link fails during RENAME_WHITEOUT creation, forcing VFS to refresh the dentries from disk after partial directory modifications.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71069?
CVE-2025-71069 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2025-71069?
Fixing CVE-2025-71069 involves updating to the latest stable version of the Linux kernel that contains the patch for this vulnerability.
What are the risks associated with CVE-2025-71069?
The risks of CVE-2025-71069 include potential file system corruption and denial of service if exploited.
Which versions of the Linux kernel are affected by CVE-2025-71069?
CVE-2025-71069 affects specific older versions of the Linux kernel that allow for the creation of corrupted directory depth values.
How can I verify if my system is vulnerable to CVE-2025-71069?
You can verify vulnerability to CVE-2025-71069 by checking the kernel version and consulting the relevant security advisories.