CVE-2025-38218

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.15.0-rc1+ #191

Description: A vulnerability in the Linux kernel has been resolved, which could lead to a kernel panic when mounting a corrupted image. The issue occurs due to inconsistent metadata in the image, causing an out-of-bounds access in the sit bitmap. This happens when the sit bitmap size is too small, resulting in an incorrect calculation of the sit blk cnt. The vulnerability can be triggered by resizing an image, which generates a corrupted image that, when mounted, causes a kernel panic.

Recommendations: For Linux kernel versions prior to 6.15.0-rc1+ #191, update to a newer version that includes the fix for the sanity check on sit bitmap size to avoid the kernel panic. As a temporary workaround, consider avoiding the use of the resize functionality until a patch is available. Restrict access to the f2fs file system to minimize the risk of exploitation.