An out-of-bounds read vulnerability in the Linux kernel f2fs subsystem allows authenticated local users to cause system instability or compromise data integrity.

This is a buffer over-read flaw in the f2fs_acl_from_disk function, where malformed Access Control Lists bypass aggregate length checks, allowing low-privileged local attackers to trigger slab-out-of-bounds memory reads via crafted filesystem attributes.

A successful exploit of this vulnerability can result in local denial of service through kernel panics, potential information disclosure of kernel memory, or local privilege escalation. Given the CVSS score of 7.8, the risk is classified as high, as an attacker with low-level local access can undermine the overall integrity and availability of the host operating system.

Immediate Action: Update the Linux kernel to version 5.10.260, 5.15.211, 6.1.177, 6.6.144, or apply the official patch from the upstream git repository.

Proactive Monitoring: Monitor system logs for kernel BUG or KASAN slab-out-of-bounds error reports related to f2fs and acl processing.

Compensating Controls: Restrict local shell access and carefully audit mounting permissions for untrusted f2fs formatted storage media.

Public Exploit Available: false

Administrators managing systems that utilize the f2fs filesystem should prioritize applying the latest stable kernel updates. Because local code execution or administrative pivoting often begins with lower-privileged local access vectors, patching this kernel vulnerability is vital to maintaining host security hardening baselines.