A local vulnerability in the Linux kernel f2fs file system handling can allow an authenticated low-privileged attacker to compromise system integrity and availability.

This is an improper handling flaw within the f2fs file system extent tree management function __destroy_extent_node() in the Linux kernel, requiring low privileges and no user interaction.

A successful exploit of this vulnerability could lead to severe file system corruption, unauthorized data access, and complete system instability or denial of service. The high CVSS score of 7.8 reflects the dangerous potential for an attacker with local access to escalate their foothold and compromise the entire operating system.

Immediate Action: Update the Linux kernel to version 6.6.144, 6.12.95, 6.18.38, 7.1.3, or later depending on the active release branch.

Proactive Monitoring: Monitor system logs for file system errors, kernel panics, or warnings related to sanity_check_extent_cache and f2fs consistency checks.

Compensating Controls: Restrict local system access to trusted users and implement strict least-privilege policies to prevent unauthorized low-level interactions with vulnerable file systems.

Public Exploit Available: false

Given the high severity score and potential for system-wide compromise, administrators must prioritize scheduling kernel updates for all affected Linux environments. Applying the official patches provided by the vendor is the only definitive way to resolve the underlying logic flaw in the f2fs extent cache management.