CVE-2025-37739

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()

syzbot reports an UBSAN issue as below:

------------[ cut here ]------------

UBSAN: array-index-out-of-bounds in fs/f2fs/node.h:381:10

index 18446744073709550692 is out of range for type '__le32[5]' (aka 'unsigned int[5]')

CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0

Call Trace:

<TASK>

__dump_stack lib/dump_stack.c:94 [inline]

dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120

ubsan_epilogue lib/ubsan.c:231 [inline]

__ubsan_handle_out_of_bounds+0x121/0x150 lib/ubsan.c:429

get_nid fs/f2fs/node.h:381 [inline]

f2fs_truncate_inode_blocks+0xa5e/0xf60 fs/f2fs/node.c:1181

f2fs_do_truncate_blocks+0x782/0x1030 fs/f2fs/file.c:808

f2fs_truncate_blocks+0x10d/0x300 fs/f2fs/file.c:836

f2fs_truncate+0x417/0x720 fs/f2fs/file.c:886

f2fs_file_write_iter+0x1bdb/0x2550 fs/f2fs/file.c:5093

aio_write+0x56b/0x7

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References