PT-2026-22921 · F2Fs+1 · F2Fs+1

Published 2026-03-04 · Updated 2026-04-20 · CVE-2026-23235

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The f2fs file system in the Linux kernel contains a flaw related to out-of-bounds memory access and incorrect handling of integer values when reading and writing sysfs attributes. Specifically, certain f2fs sysfs attributes, such as carve out and atgc age threshold, are susceptible to this issue. The carve out attribute, mapped to struct f2fs sb info->carve out, is an 8-bit integer but can be set to values exceeding 255 through the sysfs interface. The atgc age threshold attribute, mapped to struct atgc management->age threshold, is a 64-bit integer, but the sysfs interface cannot correctly handle values larger than UINT MAX. The root causes are related to the sbi store() and f2fs sbi show() functions, which incorrectly treat all default values as unsigned integers, leading to out-of-bounds writes and reads.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-23235

ECHO-301D-890F-D77C

OPENSUSE-SU-2026:10387-1

Affected Products

Linux Kernel

F2Fs

References · 60

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23235.json · Exploit
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2026-23235 · Vendor Advisory
• https://git.kernel.org/stable/c/438a405fbad6882df0e34b3e1a16839a71f04240 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-23235 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2026-23235 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10387-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2026-50160.html · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2026-23235 · Vendor Advisory
• https://git.kernel.org/stable/c/98ea0039dbfdd00e5cc1b9a8afa40434476c0955 · Patch
• https://git.kernel.org/stable/c/d4a594dd952df123cbdcdee9b9640d9d55e4a954 · Patch
• https://ubuntu.com/security/CVE-2026-23235 · Vendor Advisory
• https://git.kernel.org/stable/c/e85a99db9ab85dfc30d93b0ca0e9156f3127f55a · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-23235 · Vendor Advisory
• https://git.kernel.org/stable/c/3a905e183c047577b154f08a78ac3039e9454703 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-23235 · Security Note