CVE-2025-38347

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to do sanity check on ino and xnid

syzbot reported a f2fs bug as below:

INFO: task syz-executor140:5308 blocked for more than 143 seconds.

Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0

"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.

task:syz-executor140 state:D stack:24016 pid:5308 tgid:5308 ppid:5306 task_flags:0x400140 flags:0x00000006

Call Trace:

<TASK>

context_switch kernel/sched/core.c:5378 [inline]

__schedule+0x190e/0x4c90 kernel/sched/core.c:6765

__schedule_loop kernel/sched/core.c:6842 [inline]

schedule+0x14b/0x320 kernel/sched/core.c:6857

io_schedule+0x8d/0x110 kernel/sched/core.c:7690

folio_wait_bit_common+0x839/0xee0 mm/filemap.c:1317

__folio_lock mm/filemap.c:1664 [inline]

folio_lock include/linux/pagemap.h:1163 [inline]

__filemap_get_folio+0x147/0xb40 mm/filemap.c:1917

pagecache_get_page+0x2c/0x130 mm/folio-compat.c:87

find_get_page_fla

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References