SECUFOCUSNOW
Home›CVE index›CVE-2025-38677
Review reviewHigh

CVE-2025-38677

Linux Linux, SIMATIC CN 4100, linux kernel

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid out-of-boundary access in dnode page As Jiaming Zhang reported: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x1c1/0x2a0 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0x17e/0x800 mm/kasan/report.c:480 kasan_report+0x147/0x180 mm/kasan/report.c:593 data_blkaddr fs/f2fs/f2fs.h:3053 [inline] f2fs_data_blkaddr fs/f2fs/f2fs.h:3058 [inline] f2fs_get_dnode_of_data+0x1a09/0x1c40 fs/f2fs/node.c:855 f2fs_reserve_block+0x53/0x310 fs/f2fs/data.c:1195 pre...

CVSS
7.1
EPSS
0.17%
6.28% percentile
CISA KEV
Not listed
Published
2025.08.30
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.17%
Technical severityCVSS 7.1

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid out-of-boundary access in dnode page As Jiaming Zhang reported: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x1c1/0x2a0 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0x17e/0x800 mm/kasan/report.c:480 kasan_report+0x147/0x180 mm/kasan/report.c:593 data_blkaddr fs/f2fs/f2fs.h:3053 [inline] f2fs_data_blkaddr fs/f2fs/f2fs.h:3058 [inline] f2fs_get_dnode_of_data+0x1a09/0x1c40 fs/f2fs/node.c:855 f2fs_reserve_block+0x53/0x310 fs/f2fs/data.c:1195 pre...

Affected product and versions

Product
Linux Linux, SIMATIC CN 4100, linux kernel
Affected versions
>= 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 < ee4d13f5407cbdf1216cc258f45492075713889a, >= 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 < a650654365c57407413e9b1f6ff4d539bf2e99ca, >= 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 < 6b7784ea07e6aa044f74b39d6b5af5e28746fc81, >= 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 < 901f62efd6e855f93d8b1175540f29f4dc45ba55, >= 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 < 92ef491b506a0f4dd971a3a76f86f2d8f5370180, >= 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 < 888aa660144bcb6ec07839da756ee46bfcf7fc53, >= 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 < f1d5093d9fe9f3c74c123741c88666cc853b79c5, >= 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 < 77de19b6867f2740cdcb6c9c7e50d522b47847a4, >= 3.8, < V5.0, >= 3.8 < 5.4.297, >= 5.5 < 5.10.241, >= 5.11 < 5.15.190, >= 5.16 < 6.1.149, >= 6.2 < 6.6.103, >= 6.7 < 6.12.44, >= 6.13 < 6.16.4, 11.0
Fixed versions
5.4.297, 5.10.241, 5.15.190, 6.1.149, 6.6.103, 6.12.44, 6.16.4

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, SIMATIC CN 4100, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CWE
CWE-125