ThreatCluster

Multiple CVEs Addressed in f2fs Vulnerabilities

First seen 5 Mar 2026, 09:12 UTC Api.Msrc.Microsoft 63

Article Content

Browse articles
ThreatCluster

On March 4, 2026, two critical vulnerabilities were published affecting the f2fs filesystem. CVE-2026-23235 addresses an out-of-bounds access issue, while CVE-2026-23234 fixes a use-after-free vulnerability in the f2fs_write_end_io() function. These vulnerabilities could potentially lead to exploitation if not addressed promptly.

Timeline

2026-03-04
CVE-2026-23235 published
2026-03-04
CVE-2026-23234 published
2026-03-05
Articles published regarding the vulnerabilities