Critical· 9.8official fix available
CVE-2025-68315
CVE-2025-68315 is a critical vulnerability in the Linux kernel's f2fs filesystem where a potential corruption in the free_nid_list could be exploited. The fix involves adding a sanity check in f2fs_alloc_nid() to detect invalid inode/nid values.
publishedDec 16, 2025
last modifiedJul 30, 2026
sourcesNVD
severity · cvss
9.8
critical · how bad it is
exploitation · epss
<1%
31th percentile · chance of exploitation in 30 days
(ai-assisted) A model wrote this summary from the official data, so double-check it against the source before you act on it. Read the official advisory →
auto-deletes from the system
counting…on Aug 29, 2026
An official fix is available, so this entry is kept for 30 days and then removed automatically.
01
Who is affected
Users of systems running the Linux kernel with the f2fs filesystem.
02
Real-world impact
Could allow attackers to exploit corrupted metadata in the filesystem, potentially leading to data corruption or system instability.
03
Why this severity
CVSS 9.8 (critical): High confidence in exploitation due to network accessibility, low attack complexity, and no privileges required.
04
What to do about it
official fix available
recommended steps
- 01Upgrade the Linux kernel to a version that includes the patch for CVE-2025-68315.
NVD description of the vulnerability resolution
05
Timeline
- Dec 16, 2025 · Dec 16, 2025PublishedDisclosed and added to the National Vulnerability Database.
- Jul 30, 2026 · 6d agoAdvisory updatedThe NVD record was last revised.
- Jul 30, 2026 · 6d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.
06
How it’s attacked
Attack vectorNetwork (remote)
Attack complexityLow
Privileges requiredNone
User interactionNone needed
ScopeUnchanged
Confidentiality impactHigh
Integrity impactHigh
Availability impactHigh
07
(ai-assisted) A model wrote this summary from the official data, so double-check it against the source before you act on it. Read the official advisory →