CVE-2025-38347

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66

Description: A flaw exists in the f2fs file system within the Linux kernel related to insufficient sanity checks on inode numbers (ino) and extended attribute inode numbers (xnid). Specifically, a scenario can occur where the xattr nid of an inode is identical to its i ino, leading to a deadlock during the mknod operation within a corrupted directory. The issue arises from attempting to lock the directory's inode page twice during the process, triggered by the call stack involving f2fs mknod, f2fs add inline entry, f2fs get inode page, f2fs init acl, f2fs acl create, f2fs get acl, f2fs getxattr, lookup all xattrs, and get node page.

Recommendations: Linux kernel versions prior to 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 should be updated to a newer version that includes the fix for this issue.