CVE-2025-38627: 
Linux Debian vulnerability analysis and mitigation

CVE-2025-38627 is a vulnerability discovered in the Linux kernel affecting the f2fs (Flash-Friendly File System) compression functionality. The vulnerability was disclosed on August 22, 2025, and involves a Use-After-Free (UAF) issue in the f2fsinodeinfo within f2fsfreedic function (NVD).

The vulnerability occurs when the decompressioctx is released asynchronously after I/O completion. If a file is deleted immediately after being read, and the kworker processing postreadwq has not executed due to high workloads, the inode (f2fsinodeinfo) may be evicted and freed before it is used in f2fsfreedic. This creates a race condition leading to a Use-After-Free vulnerability (NVD).

The vulnerability could potentially lead to memory corruption in the Linux kernel when handling f2fs compressed files. This could result in system instability or potential privilege escalation, though the exact impact depends on the exploitation conditions (NVD).

A patch has been developed that stores the compress_algorithm and sbi in dic to avoid the inode UAF issue. This solution replaces a previous fix that was found to potentially cause system hangs (NVD).