CVE-2026-43349
MediumSummary
In the Linux kernel, a vulnerability was found in the F2FS filesystem involving uninitialized value access in the f2fs_sanity_check_node_footer function. The issue was reported by syzbot and may lead to unpredictable system behavior.
Risk Assessment
The risk involves potential reading of uninitialized memory, which could result in disclosure of sensitive data or system panic. An attacker could exploit this vulnerability to destabilize the F2FS filesystem.
Recommendation
It is recommended to immediately update the Linux kernel to a version containing the fix for CVE-2026-43349. Monitor official security advisories from your Linux distribution.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid uninit-value access in f2fs_sanity_check_node_footer syzbot reported a f2fs bug as below: BUG: KMSAN: uninit-value in f2fs_sanity_check_node_footer+0x374/0xa20 fs/f2fs/node.c:1520 f2fs_sanity_check_node_footer