What’s Vulnerable › Vulnerabilities

CVE-2025-40077: f2fs: fix to avoid overflow while left shift operation

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-28 · updated 2026-10-30

Description

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid overflow while left shift operation Should cast type of folio->index from pgoff_t to loff_t to avoid overflow while left shift operation.

Affected products

• Linux: 5.8 — fixed in 6.18

How to fix

Upgrade to a fixed version: Linux 6.18. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0e75a098b0a37f02ca31fe99ac16004c8163cf67
• https://git.kernel.org/stable/c/0fe1c6bec54ea68ed8c987b3890f2296364e77bb
• https://git.kernel.org/stable/c/57d3381dfb97ff73ddd18601017fec21cca80985
• https://git.kernel.org/stable/c/7fb12f75da1da83b29964c02646f851d919301ea
• https://git.kernel.org/stable/c/ef49378864bb1ed14cd48c8e687729e12714d849

Get alerted when CVE-2025-40077 or the next vulnerability affects your stack