01 Record

CVE-2025-37739

f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.19% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 8.4% of scored records. A rank, not a probability.
NVD base score: 7.1 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-05-01 12:55Z1 YR AGO

Last updated

2026-05-11 21:14Z3 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-125Out-of-bounds ReadBase

Data version

5.2

Document digest

97457c24c6394ddf97a0a2e3ac3424de6c1e4ad931768cde33f177a18549c8e0

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux98e4da8ca301e062d79ae168c67e56f3c3de3ce4 to < a67e1bf03c609a751d1740a1789af25e599966fa, 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 to < 67e16ccba74dd8de0a7b10062f1e02d77432f573, 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 to < 98dbf2af63de0b551082c9bc48333910e009b09f, 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 to < 8b5e5aac44fee122947a269f9034c048e4c295de, 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 to < ecc461331604b07cdbdb7360dbdf78471653264c, 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 to < d7242fd7946d4cba0411effb6b5048ca55125747, 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 to < 6ba8b41d0aa4b82f90f0c416cb53fcef9696525d, 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 to < e6494977bd4a83862118a05f57a8df40256951c0, 3.8—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/a67e1bf03c609a751d1740a1789af25e599966fa
git.kernel.orghttps://git.kernel.org/stable/c/67e16ccba74dd8de0a7b10062f1e02d77432f573
git.kernel.orghttps://git.kernel.org/stable/c/98dbf2af63de0b551082c9bc48333910e009b09f
git.kernel.orghttps://git.kernel.org/stable/c/8b5e5aac44fee122947a269f9034c048e4c295de
git.kernel.orghttps://git.kernel.org/stable/c/ecc461331604b07cdbdb7360dbdf78471653264c
git.kernel.orghttps://git.kernel.org/stable/c/d7242fd7946d4cba0411effb6b5048ca55125747
git.kernel.orghttps://git.kernel.org/stable/c/6ba8b41d0aa4b82f90f0c416cb53fcef9696525d
git.kernel.orghttps://git.kernel.org/stable/c/e6494977bd4a83862118a05f57a8df40256951c0
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/05/msg00030.html

01 Record index

CVE-2025-37739

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-37739

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References