Threats tagged 'ghsa-fq4p-236v-8g34'

CVE-2025-22123 is a medium severity vulnerability in the Linux kernel's f2fs filesystem. It involves accessing an uninitialized curseg structure, which can lead to a kernel panic. The issue arises because f2fs_write_inode() does not check the CP_ERROR_FLAG before accessing curseg->segno, potentially causing invalid memory access and system crashes. The flaw was reported by syzbot and fixed by adding proper flag checks and validation of curseg->segno before use.