A high-severity validation flaw in the Linux kernel f2fs file system allows local attackers with low privileges to achieve full system compromise.

This is a privilege validation vulnerability in the f2fs file system component of the Linux kernel, where the is_meta_ino() function unconditionally treats the compressed page cache inode as a meta inode. An authenticated attacker with low local privileges can exploit this via crafted directory entries to trigger unintended inode instantiation.

A successful exploit of this vulnerability could lead to total confidentiality, integrity, and availability compromise of the affected host system. Since the vulnerability permits low-privileged local users to manipulate internal kernel structures, attackers can potentially escalate privileges to root level, resulting in unauthorized data access, system disruption, and complete host takeover. The assigned CVSS score of 7.8 reflects a high severity level, primarily constrained by the requirement for local access.

Immediate Action: Update the Linux kernel to the patched stable versions, specifically fixed in versions 5.15.212, 6.1.177, 6.6.144, 6.12.95, or later.

Proactive Monitoring: Monitor system audit logs for anomalous f2fs mount operations, unexpected kernel trace events, and unauthorized privilege escalation attempts.

Compensating Controls: Restrict local user access and limit execution privileges on systems utilizing f2fs file systems until updates can be deployed.

Public Exploit Available: No

System administrators must treat this high-severity kernel vulnerability with urgency by applying the official kernel patches immediately. Because the flaw allows local privilege escalation, prompt updates to the affected Linux kernel packages are essential to protect system integrity and prevent unauthorized administrative access.