Juhyung Park

**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** A vulnerability in the Linux kernel has been resolved, related to the f2fs file system. The issue is caused by a loop condition in the `f2fs quota sync()` function, where the `cnt` variable should be passed to `sb has quota active()` instead of `type` to check active quota properly. This can lead to a NULL pointer dereference when the `type` is -1. The vulnerability can cause a kernel panic and a fatal exception. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to the erofs component in the Linux kernel, specifically with the lz4 inplace decompression. The problem arises because the LZ4 algorithm expects the compressed data to be arranged at the end of the decompressed buffer, but erofs typically maps two individual virtual buffers, making the relative order uncertain. This uncertainty can lead to data corruption, particularly on new Intel x86 processors with the FSRM feature, which exposes the issue with "rep movsb". The solution involves strictly using the decompressed buffer for lz4 inplace decompression. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.