CVE-2025-71107

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc5-xfstests-g9dd1835ecda5

Description A flaw exists in the Linux kernel's F2FS filesystem implementation where the f2fs put super() function may be called before all node page reads are completed. This can lead to filesystem reference count leaks during unmount operations and potentially cause system crashes, as demonstrated by crashes in Xfstests generic/335 and generic/336. The issue occurs because f2fs put super() is invoked prematurely, before all node pages have finished reading. Adding a call to f2fs wait on all pages() for F2FS RD NODE resolves the problem.

Recommendations Update to a version of the Linux kernel after 6.17.0-rc5-xfstests-g9dd1835ecda5.