Not yet scoredPublished Oct 28, 2025

CVE-2025-40077f2fs: fix to avoid overflow while left shift operation

Updated under an hour ago (Oct 27, 2026, 12:10 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid overflow while left shift operation Should cast type of folio->index from pgoff_t to loff_t to avoid overflow while left shift operation.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 3265d3db1f16395cfc6b8ea9b31b4001d98d05ef before ef49378864bb1ed14cd48c8e687729e12714d849; 3265d3db1f16395cfc6b8ea9b31b4001d98d05ef builds before 0e75a098b0a37f02ca31fe99ac16004c8163cf67; 3265d3db1f16395cfc6b8ea9b31b4001d98d05ef builds before 57d3381dfb97ff73ddd18601017fec21cca80985; 3265d3db1f16395cfc6b8ea9b31b4001d98d05ef builds before 0fe1c6bec54ea68ed8c987b3890f2296364e77bb	CNA record

References

References

https://git.kernel.org/stable/c/ef49378864bb1ed14cd48c8e687729e12714d849
https://git.kernel.org/stable/c/0e75a098b0a37f02ca31fe99ac16004c8163cf67
https://git.kernel.org/stable/c/57d3381dfb97ff73ddd18601017fec21cca80985
https://git.kernel.org/stable/c/0fe1c6bec54ea68ed8c987b3890f2296364e77bb

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.