What’s Vulnerable › Vulnerabilities

CVE-2025-40333: f2fs: fix infinite loop in __insert_extent_tree()

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-09 · updated 2026-10-14

Description

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix infinite loop in __insert_extent_tree() When we get wrong extent info data, and look up extent_node in rb tree, it will cause infinite loop (CONFIG_F2FS_CHECK_FS=n). Avoiding this by return NULL and print some kernel messages in that case.

Affected products

• Linux kernel: 3.8 — fixed in 6.18

How to fix

Upgrade to a fixed version: Linux kernel 6.18. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/23361bd54966b437e1ed3eb1a704572f4b279e58
• https://git.kernel.org/stable/c/765f8816d3959ef1f3f7f85e2af748594d091f40
• https://git.kernel.org/stable/c/c0b9951bb2668d67eb4817bb23fc109abc08c075
• https://git.kernel.org/stable/c/f4c31adcb2a0556f43776d4e51a67de88d7fb9ee

Get alerted when CVE-2025-40333 or the next vulnerability affects your stack