CVE-2025-68796

Published Jan 13, 2026

Overview

CVE-2025-68796 is a known-severity vulnerability. It was published on January 13, 2026.

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to avoid updating zero-sized extent in extent cache

As syzbot reported:

F2FS-fs (loop0): __update_extent_tree_range: extent len is zero, type: 0, extent [0, 0, 0], age [0, 0]

------------[ cut here ]------------

kernel BUG at fs/f2fs/extent_cache.c:678!

Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI

CPU: 0 UID: 0 PID: 5336 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)

Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014

RIP: 0010:__update_extent_tree_range+0x13bc/0x1500 fs/f2fs/extent_cache.c:678

Call Trace:

<TASK>

f2fs_update_read_extent_cache_range+0x192/0x3e0 fs/f2fs/extent_cache.c:1085

f2fs_do_zero_range fs/f2fs/file.c:1657 [inline]

f2fs_zero_range+0x10c1/0x1580 fs/f2fs/file.c:1737

f2fs_fallocate+0x583/0x990 fs/f2fs/file.c:2030

vfs_fallocate+0x669/0x7e0 fs/open.c:342

ioctl_preallocate fs/ioctl.c:289 [inline]

file_ioctl+0x611/0x780 fs/ioctl.c

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References

Ref git.kernel.org/stable/c/4f244c64efe628d277b916f47071adf480eb8646 Ref git.kernel.org/stable/c/72c58a82e6fb7b327e8701f5786c70c3edc56188 Ref git.kernel.org/stable/c/7c37c79510329cd951a4dedf3f7bf7e2b18dccec Ref git.kernel.org/stable/c/9c07bd262c13ca922adad6e7613d48505f97f548 Ref git.kernel.org/stable/c/bac23833220a1f8fe8dfab7e16efa20ff64d7589 Ref git.kernel.org/stable/c/e50b81c50fcbe63f50405bb40f262162ff32af88 Ref git.kernel.org/stable/c/efe3371001f50a2d6f746b50bdc6f9f26b2089ec

Frequently Asked Questions

What is CVE-2025-68796?

CVE-2025-68796 is a known-severity vulnerability. It was published on January 13, 2026.

How severe is CVE-2025-68796?

CVSS score information is not yet available for this vulnerability. Check back as the CVE record is updated by NVD analysts.

How do I fix or remediate CVE-2025-68796?

How can CyberStrike help with CVE-2025-68796?

CyberStrike's AI-powered security agents can automatically detect CVE-2025-68796 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.