CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's F2FS filesystem, specifically in the handling of the F2FS_IOC_MOVE_RANGE operation, which fails to properly validate the destination size before updating the inode size. This oversight can lead to potential destination overflow, allowing unauthorized extensions of the destination inode, which may compromise data integrity. Organizations utilizing Linux systems with F2FS should prioritize patching this vulnerability to mitigate risks associated with filesystem corruption and unauthorized data manipulation.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: f2fs: validate MOVE_RANGE destination size F2FS_IOC_MOVE_RANGE checks the source range, but not the destination end before updating i_size. A source hole can expose this: __clone_blkaddrs() skips NULL_ADDR entries and returns success, so the caller can still extend the destination inode with unchecked pos_out + len. Reject destination overflow and use inode_newsize_ok() before extending the destination inode.