A race condition vulnerability in the Linux kernel f2fs implementation affects local users, creating a risk of kernel panics and full system compromise.

This is a race condition in the f2fs file system folio management functions, requiring local access with low privileges and no user interaction.

Successful exploitation of this vulnerability can lead to repeated kernel panics, resulting in denial of service and potential system compromise. The CVSS score of 7.8 indicates a high severity rating, driven by the potential for complete loss of confidentiality, integrity, and availability at the local operating system level.

Immediate Action: Update the Linux kernel to version 7.1.3 or later, or apply the corresponding upstream fix commits.

Proactive Monitoring: Monitor system logs for recurring kernel panics, trace dumps, or unexpected reboots associated with f2fs storage partitions.

Compensating Controls: Restrict local shell access to trusted users and limit the use of f2fs formatted partitions until patches can be applied.

Public Exploit Available: No

Administrators must prioritize updating vulnerable Linux kernel packages to the patched versions immediately. Applying the latest kernel updates eliminates the underlying race condition and prevents stability failures caused by f2fs partition exhaustion.