CVE-2025-38219

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

f2fs: prevent kernel warning due to negative i_nlink from corrupted image

WARNING: CPU: 1 PID: 9426 at fs/inode.c:417 drop_nlink+0xac/0xd0

home/cc/linux/fs/inode.c:417

Modules linked in:

CPU: 1 UID: 0 PID: 9426 Comm: syz-executor568 Not tainted

6.14.0-12627-g94d471a4f428 #2 PREEMPT(full)

Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS

1.13.0-1ubuntu1.1 04/01/2014

RIP: 0010:drop_nlink+0xac/0xd0 home/cc/linux/fs/inode.c:417

Code: 48 8b 5d 28 be 08 00 00 00 48 8d bb 70 07 00 00 e8 f9 67 e6 ff

f0 48 ff 83 70 07 00 00 5b 5d e9 9a 12 82 ff e8 95 12 82 ff 90

<0f> 0b 90 c7 45 48 ff ff ff ff 5b 5d e9 83 12 82 ff e8 fe 5f e6

ff

RSP: 0018:ffffc900026b7c28 EFLAGS: 00010293

RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8239710f

RDX: ffff888041345a00 RSI: ffffffff8239717b RDI: 0000000000000005

RBP: ffff888054509ad0 R08: 0000000000000005 R09: 0000000000000000

R10: 0000000000000000 R11: ffffffff9ab36f08

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References