PT-2025-29055 · Linux+4 · Linux Kernel+4

CVE-2025-38333

·

Publicado

2025-07-10

·

Atualizado

2026-07-18

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)
Description: The Linux kernel contains a flaw within the get new segment() function in the f2fs filesystem. The function may detect an inconsistent status between free segment map and free section map, leading to an error. The fix involves recording the error in the superblock and exiting the get new segment() function to prevent further use of the segment.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Allocation of Resources Without Limits

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-770

Identificadores relacionados

AZL-64889
BDU:2025-13460
CVE-2025-38333
ECHO-FE1A-EF12-2E74
OESA-2025-2532
OESA-2025-2536
OESA-2025-2537
USN-7833-1
USN-7833-2
USN-7833-3
USN-7833-4
USN-7834-1
USN-7856-1
USN-8028-1
USN-8028-2
USN-8028-3
USN-8028-4
USN-8028-5
USN-8028-6
USN-8028-7
USN-8028-8
USN-8031-1
USN-8031-2
USN-8031-3
USN-8052-1
USN-8052-2
USN-8074-1
USN-8074-2
USN-8126-1

Produtos afetados

Debian
Linuxmint
Linux Kernel
Ubuntu
F2Fs