THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2025-40054 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: f2fs: fix UAF issue in f2fs_merge_page_bio() As JY reported in bugzilla [1], Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 pc : [0xffffffe51d249484] f2fs_is_cp_guaranteed

[NVD] CVE-2025-40054 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: f2fs: fix UAF issue in f2fs_merge_page_bio() As JY reported in bugzilla [1], Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 pc : [0xffffffe51d249484] f2fs_is_cp_guaranteed

lownvdPublished 2025-10-28

CVE-2025-40054 CVSS: 7.8 HIGH Published: 2025-10-28T12:15:39.640

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix UAF issue in f2fs_merge_page_bio()

As JY reported in bugzilla [1],

Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 pc : [0xffffffe51d249484] f2fs_is_cp_guaranteed+0x70/0x98 lr : [0xffffffe51d24adbc] f2fs_merge_page_b

Indicators of compromise

5f7701c9cbf727d1eebe77c89bbbeb3371e895e5sha1
CVE-2025-40054cve
https://bugzilla.kernel.org/show_bug.cgi?id=220575url

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-40054