Impact
During f2fs garbage‑collection in foreground‑mode (FGGC), the kernel failed to clear dentry and fsync marks from node blocks. Fsck subsequently misinterpreted those blocks as having been fsynced, producing false metadata and risking inconsistent or corrupted file system state. The flaw is a logic error that can lead to data loss or corruption of the on‑disk structure, affecting the integrity and availability of stored data.
Affected Systems
All Linux kernel installations that support the f2fs file system are potentially impacted until the recent patch is applied. No edition or version boundaries are specified, so a broad class of current kernels may contain the defect.
Risk and Exploitability
Based on the description, the likely attack vector is local exploitation by a user with elevated privileges such as root or CAP_SYS_ADMIN, since the flaw manifests during filesystem garbage‑collection. No remote or user‑level attack vector is documented. The EPSS score is < 1% and the vulnerability is not listed in CISA’s KEV catalog, indicating low but non‑zero exploitation probability. The CVSS score assigned is 7.1. Nonetheless, an attacker who can trigger the fault could cause file system corruption, so the risk is non‑negligible for systems that rely on f2fs consistency.
OpenCVE Enrichment