How many Linux F2FS (Flash-Friendly File System) CVEs are in CISA KEV?

None of Linux F2FS (Flash-Friendly File System)'s CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

What are the most common weakness types in Linux F2FS (Flash-Friendly File System) CVEs?

Linux F2FS (Flash-Friendly File System)'s CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-125 (Out-of-bounds Read).

What is the average severity of Linux F2FS (Flash-Friendly File System) CVEs?

The average CVSS base score across Linux F2FS (Flash-Friendly File System)'s scored CVEs is 7.1.

Linux F2FS (Flash-Friendly File System) Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Linux F2FS (Flash-Friendly File System) vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Linux F2FS (Flash-Friendly File System) Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Linux F2FS (Flash-Friendly File System) has 15 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.1.

Severity and exploitation

How the CVSS severity of Linux F2FS (Flash-Friendly File System)'s CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High10

Medium5

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of Linux F2FS (Flash-Friendly File System)'s CVEs are currently listed in CISA's KEV catalog.

Public exploits

No Linux F2FS (Flash-Friendly File System) CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Linux F2FS (Flash-Friendly File System) version named in a CVE, then pick one to see only the CVEs that affect it.

No specific affected versions are recorded for Linux F2FS (Flash-Friendly File System); the CVEs below apply to the product without a version pin.

15 CVEs

Sort

f2fs: fix to avoid use-after-free for cached IPU bio
CVE-2023-53537
Patch
CWE-416
High · CVSS 7.8
EPSS 0.2% (5th pct)2025-10-04
f2fs: fix to avoid out-of-boundary access in devs.path
CVE-2025-38652
Patch
CWE-125
High · CVSS 7.3
EPSS 0.2% (7th pct)2025-08-22
f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic
CVE-2025-38627
Patch
CWE-416
High · CVSS 8.8
EPSS 0.2% (6th pct)2025-08-22
f2fs: fix to avoid UAF in f2fs_sync_inode_meta()
CVE-2025-38578
Patch
CWE-416
High · CVSS 7.8
EPSS 0.2% (7th pct)2025-08-19
f2fs: fix to avoid panic in f2fs_evict_inode
CVE-2025-38577
Patch
CWE-416
High · CVSS 7.8
EPSS 0.2% (7th pct)2025-08-19
f2fs: fix to do sanity check on ino and xnid
CVE-2025-38347
Patch
Medium · CVSS 5.5
EPSS 0.2% (9th pct)2025-07-10
f2fs: prevent kernel warning due to negative i_nlink from corrupted image
CVE-2025-38219
Patch
Medium · CVSS 5.5
EPSS 0.2% (7th pct)2025-07-04
f2fs: fix to do sanity check on sit_bitmap_size
CVE-2025-38218
Patch
High · CVSS 7.8
EPSS 0.2% (8th pct)2025-07-04
f2fs: remove WARN_ON in f2fs_is_valid_blkaddr
CVE-2022-49318
Patch
Medium · CVSS 5.5
EPSS 0.3% (17th pct)2025-02-26
f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
CVE-2024-56586
Patch
Medium · CVSS 5.5
EPSS 0.2% (14th pct)2024-12-27
f2fs: fix to wait dio completion
CVE-2024-47726
Patch
High · CVSS 7.8
EPSS 0.7% (50th pct)2024-10-21
f2fs: fix to don't dirty inode for readonly filesystem
CVE-2024-42297
Patch
High · CVSS 7.8
EPSS 0.2% (15th pct)2024-08-17
f2fs: fix return value of f2fs_convert_inline_inode()
CVE-2024-42296
Patch
High · CVSS 7.8
EPSS 0.2% (13th pct)2024-08-17
f2fs: fix to avoid racing on fsync_entry_slab by multi filesystem instances
CVE-2021-47335
Patch
CWE-416
Medium · CVSS 5.5
EPSS 0.2% (13th pct)2024-05-21
f2fs: explicitly null-terminate the xattr list
CVE-2023-52436
Patch
High · CVSS 7.8
EPSS 0.3% (21th pct)2024-02-20

Common weakness types

The CWE weakness categories most often found in Linux F2FS (Flash-Friendly File System) CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Linux F2FS (Flash-Friendly File System) CVEs were published each year.

2024

2025

Other Linux products

Browse vulnerabilities for other products by Linux.

linux kernel25,199 CVEs Linux17,603 CVEs Kernel11,837 CVEs amdgpu driver34 CVEs btrfs27 CVEs f2fs26 CVEs ksmbd25 CVEs ext4 filesystem18 CVEs

All Linux vulnerabilities

Frequently asked questions

Common questions about Linux F2FS (Flash-Friendly File System) vulnerabilities.

How many CVEs does Linux F2FS (Flash-Friendly File System) have?: Linux F2FS (Flash-Friendly File System) has 15 published CVE records since 2024.
How many Linux F2FS (Flash-Friendly File System) CVEs are in CISA KEV?: None of Linux F2FS (Flash-Friendly File System)'s CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Linux F2FS (Flash-Friendly File System) vulnerabilities?: No Linux F2FS (Flash-Friendly File System) CVEs currently have a tracked public exploit in this dataset.
What are the most common weakness types in Linux F2FS (Flash-Friendly File System) CVEs?: Linux F2FS (Flash-Friendly File System)'s CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-125 (Out-of-bounds Read).
What is the average severity of Linux F2FS (Flash-Friendly File System) CVEs?: The average CVSS base score across Linux F2FS (Flash-Friendly File System)'s scored CVEs is 7.1.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Linux F2FS (Flash-Friendly File System) vulnerabilities

Get an alert for each new Linux F2FS (Flash-Friendly File System) CVE, with AI-written analysis and remediation steps.

Create an account See pricing