<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: f2fs-tools project</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2020-6108: An exploitable code execution vulnerability exists in the fsck_chk_orphan_node functionality of F2fs-Tools F2f</title><link>https://patchthecve.com/cve/CVE-2020-6108.html</link><guid>https://patchthecve.com/cve/CVE-2020-6108.html</guid><pubDate>Wed, 17 Jun 2026 03:22:42 +0000</pubDate><description>HIGH 7.8: An exploitable code execution vulnerability exists in the fsck_chk_orphan_node functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause a heap buffer overflow resulting in a code execution. An attacker can provide a malicious file to trigger this vulnerability.</description></item><item><title>CVE-2020-6107: An exploitable information disclosure vulnerability exists in the dev_read functionality of F2fs-Tools F2fs.Fs</title><link>https://patchthecve.com/cve/CVE-2020-6107.html</link><guid>https://patchthecve.com/cve/CVE-2020-6107.html</guid><pubDate>Wed, 17 Jun 2026 03:22:41 +0000</pubDate><description>MEDIUM 5.5: An exploitable information disclosure vulnerability exists in the dev_read functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause an uninitialized read resulting in an information disclosure. An attacker can provide a malicious file to trigger this vulnerability.</description></item><item><title>CVE-2020-6106: An exploitable information disclosure vulnerability exists in the init_node_manager functionality of F2fs-Tool</title><link>https://patchthecve.com/cve/CVE-2020-6106.html</link><guid>https://patchthecve.com/cve/CVE-2020-6106.html</guid><pubDate>Wed, 17 Jun 2026 03:22:41 +0000</pubDate><description>MEDIUM 5.5: An exploitable information disclosure vulnerability exists in the init_node_manager functionality of F2fs-Tools F2fs.Fsck 1.12 and 1.13. A specially crafted filesystem can be used to disclose information. An attacker can provide a malicious file to trigger this vulnerability.</description></item><item><title>CVE-2020-6105: An exploitable code execution vulnerability exists in the multiple devices functionality of F2fs-Tools F2fs.Fs</title><link>https://patchthecve.com/cve/CVE-2020-6105.html</link><guid>https://patchthecve.com/cve/CVE-2020-6105.html</guid><pubDate>Wed, 17 Jun 2026 03:22:41 +0000</pubDate><description>HIGH 7.8: An exploitable code execution vulnerability exists in the multiple devices functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause Information overwrite resulting in a code execution. An attacker can provide a malicious file to trigger this vulnerability.</description></item><item><title>CVE-2020-6104: An exploitable information disclosure vulnerability exists in the get_dnode_of_data functionality of F2fs-Tool</title><link>https://patchthecve.com/cve/CVE-2020-6104.html</link><guid>https://patchthecve.com/cve/CVE-2020-6104.html</guid><pubDate>Wed, 17 Jun 2026 03:22:41 +0000</pubDate><description>MEDIUM 5.5: An exploitable information disclosure vulnerability exists in the get_dnode_of_data functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause information disclosure resulting in a information disclosure. An attacker can provide a malicious file to trigger this vulnera</description></item><item><title>CVE-2020-6070: An exploitable code execution vulnerability exists in the file system checking functionality of fsck.f2fs 1.12</title><link>https://patchthecve.com/cve/CVE-2020-6070.html</link><guid>https://patchthecve.com/cve/CVE-2020-6070.html</guid><pubDate>Wed, 17 Jun 2026 03:22:38 +0000</pubDate><description>HIGH 7.8: An exploitable code execution vulnerability exists in the file system checking functionality of fsck.f2fs 1.12.0. A specially crafted f2fs file can cause a logic flaw and out-of-bounds heap operations, resulting in code execution. An attacker can provide a malicious file to trigger this vulnerabilit</description></item></channel></rss>