Threats tagged 'ghsa-qc3f-4c25-g23q'

CVE-2025-37739 is a high-severity vulnerability in the Linux kernel's f2fs filesystem code that causes an out-of-bounds array access in the function f2fs_truncate_inode_blocks(). This occurs due to improper handling of inode truncation when certain conditions cause an invalid index to be used. The issue was detected by UBSAN and involves accessing a negative offset in an array, potentially leading to memory corruption. The root cause relates to a missing sanity check when truncating inode blocks, especially when node pages are reused and not properly identified as inode pages.