Home

Description

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix KMSAN uninit-value in extent_info usage KMSAN reported a use of uninitialized value in `__is_extent_mergeable()` and `__is_back_mergeable()` via the read extent tree path. The root cause is that `get_read_extent_info()` only initializes three fields (`fofs`, `blk`, `len`) of `struct extent_info`, leaving the remaining fields uninitialized. This leads to undefined behavior when those fields are accessed later, especially during extent merging. Fix it by zero-initializing the `extent_info` struct before population.

PUBLISHED Reserved 2025-04-16 | Published 2025-08-19 | Updated 2025-09-29 | Assigner Linux

Product status

Default status
unaffected

94afd6d6e5253179c9b891d02081cc8355a11768 before 08e8ab00a6d20d5544c932ee85a297d833895141
affected

94afd6d6e5253179c9b891d02081cc8355a11768 before e68b751ec2b15d866967812c57cfdfc1eba6a269
affected

94afd6d6e5253179c9b891d02081cc8355a11768 before dabfa3952c8e6bfe6414dbf32e8b6c5f349dc898
affected

94afd6d6e5253179c9b891d02081cc8355a11768 before 44a79437309e0ee2276ac17aaedc71253af253a8
affected

94afd6d6e5253179c9b891d02081cc8355a11768 before cc1615d5aba4f396cf412579928539a2b124c8a0
affected

94afd6d6e5253179c9b891d02081cc8355a11768 before 01b6f5955e0008af6bc3a181310d2744bb349800
affected

94afd6d6e5253179c9b891d02081cc8355a11768 before 154467f4ad033473e5c903a03e7b9bca7df9a0fa
affected

Default status
affected

5.15
affected

Any version before 5.15
unaffected

5.15.190
unaffected

6.1.148
unaffected

6.6.102
unaffected

6.12.42
unaffected

6.15.10
unaffected

6.16.1
unaffected

6.17
unaffected

References

git.kernel.org/...c/08e8ab00a6d20d5544c932ee85a297d833895141

git.kernel.org/...c/e68b751ec2b15d866967812c57cfdfc1eba6a269

git.kernel.org/...c/dabfa3952c8e6bfe6414dbf32e8b6c5f349dc898

git.kernel.org/...c/44a79437309e0ee2276ac17aaedc71253af253a8

git.kernel.org/...c/cc1615d5aba4f396cf412579928539a2b124c8a0

git.kernel.org/...c/01b6f5955e0008af6bc3a181310d2744bb349800

git.kernel.org/...c/154467f4ad033473e5c903a03e7b9bca7df9a0fa

cve.org (CVE-2025-38579)

nvd.nist.gov (CVE-2025-38579)

Download JSON