cve 23235

  1. CVE-2026-23235: Fix for F2FS sysfs out-of-bounds in Linux kernel

    A subtle but important vulnerability in the Linux kernel’s Flash-Friendly File System (F2FS) — tracked as CVE-2026-23235 — was disclosed and fixed in early March 2026. The root cause is a mismatch between how certain F2FS sysfs attributes are represented in kernel data structures and how the...