Not yet scoredPublished Jan 13, 2026

CVE-2025-68796f2fs: fix to avoid updating zero-sized extent in extent cache

Updated under an hour ago (Oct 26, 2026, 2:00 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid updating zero-sized extent in extent cache As syzbot reported: F2FS-fs (loop0): __update_extent_tree_range: extent len is zero, type: 0, extent [0, 0, 0], age [0, 0] ------------[ cut here ]------------ kernel BUG at fs/f2fs/extent_cache.c:678! Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI CPU: 0 UID: 0 PID: 5336 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:__update_extent_tree_range+0x13bc/0x1500 fs/f2fs/extent_cache.c:678 Call Trace: <TASK> f2fs_update_read_extent_cache_range+0x192/0x3e0 fs/f2fs/extent_cache.c:1085 f2fs_do_zero_range fs/f2fs/file.c:1657 [inline] f2fs_zero_range+0x10c1/0x1580 fs/f2fs/file.c:1737 f2fs_fallocate+0x583/0x990 fs/f2fs/file.c:2030 vfs_fallocate+0x669/0x7e0 fs/open.c:342 ioctl_preallocate fs/ioctl.c:289 [inline] file_ioctl+0x611/0x780 fs/ioctl.c:-1 do_vfs_ioctl+0xb33/0x1430 fs/ioctl.c:576 __do_sys_ioctl fs/ioctl.c:595 [inline] __se_sys_ioctl+0x82/0x170 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f07bc58eec9 In error path of f2fs_zero_range(), it may add a zero-sized extent into extent cache, it should be avoided.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 6e9619499f53b22ead972e476c0e8341c997d929 before 9c07bd262c13ca922adad6e7613d48505f97f548; from 6e9619499f53b22ead972e476c0e8341c997d929 before 72c58a82e6fb7b327e8701f5786c70c3edc56188; from 6e9619499f53b22ead972e476c0e8341c997d929 before e50b81c50fcbe63f50405bb40f262162ff32af88; from 6e9619499f53b22ead972e476c0e8341c997d929 before efe3371001f50a2d6f746b50bdc6f9f26b2089ec; 6e9619499f53b22ead972e476c0e8341c997d929 builds before 4f244c64efe628d277b916f47071adf480eb8646; from 6e9619499f53b22ead972e476c0e8341c997d929 before bac23833220a1f8fe8dfab7e16efa20ff64d7589; from 6e9619499f53b22ead972e476c0e8341c997d929 before 7c37c79510329cd951a4dedf3f7bf7e2b18dccec	CNA record

References

References

https://git.kernel.org/stable/c/9c07bd262c13ca922adad6e7613d48505f97f548
https://git.kernel.org/stable/c/72c58a82e6fb7b327e8701f5786c70c3edc56188
https://git.kernel.org/stable/c/e50b81c50fcbe63f50405bb40f262162ff32af88
https://git.kernel.org/stable/c/efe3371001f50a2d6f746b50bdc6f9f26b2089ec
https://git.kernel.org/stable/c/4f244c64efe628d277b916f47071adf480eb8646
https://git.kernel.org/stable/c/bac23833220a1f8fe8dfab7e16efa20ff64d7589
https://git.kernel.org/stable/c/7c37c79510329cd951a4dedf3f7bf7e2b18dccec

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.