CVE-2025-68769

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix return value of f2fs_recover_fsync_data()

With below scripts, it will trigger panic in f2fs:

mkfs.f2fs -f /dev/vdd

mount /dev/vdd /mnt/f2fs

touch /mnt/f2fs/foo

sync

echo 111 >> /mnt/f2fs/foo

f2fs_io fsync /mnt/f2fs/foo

f2fs_io shutdown 2 /mnt/f2fs

umount /mnt/f2fs

mount -o ro,norecovery /dev/vdd /mnt/f2fs

or

mount -o ro,disable_roll_forward /dev/vdd /mnt/f2fs

F2FS-fs (vdd): f2fs_recover_fsync_data: recovery fsync data, check_only: 0

F2FS-fs (vdd): Mounted with checkpoint version = 7f5c361f

F2FS-fs (vdd): Stopped filesystem due to reason: 0

F2FS-fs (vdd): f2fs_recover_fsync_data: recovery fsync data, check_only: 1

Filesystem f2fs get_tree() didn't set fc->root, returned 1

------------[ cut here ]------------

kernel BUG at fs/super.c:1761!

Oops: invalid opcode: 0000 [#1] SMP PTI

CPU: 3 UID: 0 PID: 722 Comm: mount Not tainted 6.18.0-rc2+ #721 PREEMPT(voluntary)

Hardware name: QEMU Standard PC (i440FX + PIIX,

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References