ThreatCluster

Multiple CVEs Addressed in f2fs File System Vulnerabilities

First seen 18 Feb 2026, 12:23 UTC Api.Msrc.Microsoft 39

Article Content

Browse articles
ThreatCluster

Four CVEs related to the f2fs file system have been published, addressing various vulnerabilities. The issues include out-of-bounds access, sanity checks on block counts, and segment allocation failures, affecting systems utilizing the f2fs file system. The vulnerabilities were published between May and July 2025, with patches announced on February 18, 2026.

Timeline

2025-05-01
CVE-2025-37739 published
2025-07-03
CVE-2025-38163 published
2025-07-04
CVE-2025-38218 published
2025-07-10
CVE-2025-38333 published
2026-02-18
Patches released for multiple f2fs vulnerabilities