PT-2026-2590 · F2Fs+3 · F2Fs+3

Published

2026-01-13

·

Updated

2026-05-11

·

CVE-2025-71069

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The F2FS filesystem, when mounting filesystems with corrupted directory depth values, can experience issues with dentry cache invalidation during rename operations involving whiteouts. Specifically, if f2fs add link fails during whiteout creation due to a corrupted directory structure after partial directory modifications have been committed to disk, the VFS does not update the dentry cache. This results in stale mappings where the dentry cache still points to an old inode that has already had its i nlink decremented to zero. Subsequent operations using this stale cache can then incorrectly reference freed inodes, potentially triggering a WARNING in drop nlink() when attempting to decrement the inode link count on an inode that already has a link count of zero. The issue occurs when a first rename operation (RENAME WHITEOUT) partially completes, and a second rename operation targets the same entry, utilizing the stale cache information.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

AZL-74489
CVE-2025-71069
ECHO-67AB-C7E3-E00A
MGASA-2026-0017
MGASA-2026-0018
USN-8096-1
USN-8096-2
USN-8096-3
USN-8096-4
USN-8096-5
USN-8116-1
USN-8141-1
USN-8163-1
USN-8163-2
USN-8177-1
USN-8177-2
USN-8179-1
USN-8179-2
USN-8179-3
USN-8179-4
USN-8183-1
USN-8183-2
USN-8184-1
USN-8185-1
USN-8185-2
USN-8203-1
USN-8204-1
USN-8243-1
USN-8245-1
USN-8257-1
USN-8258-1
USN-8260-1
USN-8261-1
USN-8265-1

Affected Products

F2Fs
Linuxmint
Linux Kernel
Ubuntu