BaseFortify

Publication date: 2025-10-28

Last updated on: 2025-11-24

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid overflow while left shift operation Should cast type of folio->index from pgoff_t to loff_t to avoid overflow while left shift operation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-28

Last Modified

2025-11-24

Generated

2026-07-06

AI Q&A

2025-10-28

EPSS Evaluated

2026-07-04

NVD

CVE-2025-40077

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel's f2fs file system involves an overflow issue during a left shift operation. Specifically, the type of folio->index was not properly cast from pgoff_t to loff_t, which could cause an overflow when performing the left shift. The fix involves correctly casting the type to avoid this overflow.

Impact Analysis

An overflow during a left shift operation in the kernel could potentially lead to incorrect memory calculations or data corruption, which might affect system stability or security. However, specific impacts are not detailed in the provided information.

Hi! I’m here to help you understand CVE-2025-40077. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70