CVE-2025-68772

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0

Description The Linux kernel contains a flaw within the f2fs file system related to handling compression contexts during writeback operations. A race condition can occur when a file is being fsynced, its attributes are modified, or an ioctl operation is performed, potentially leading to a divide error. Specifically, the issue arises when the inode is non-compressed and the cluster size is updated concurrently with the compression context, triggering a division by zero in the f2fs all cluster page ready function. The fix involves introducing an atomic variable within the f2fs inode info structure to track the number of threads calling f2fs write cache pages() and using a semaphore lock to protect updates to this variable, preventing the race condition.

Recommendations Update to Linux kernel version 6.17.0 or later.