CVE-2020-6106: f2fs-Tools Project f2fs-Tools

Medium severity, CVSS 5.5. EPSS: 1.5% chance of exploitation in the next 30 days.

An exploitable information disclosure vulnerability exists in the init_node_manager functionality of F2fs-Tools F2fs.Fsck 1.12 and 1.13. A specially crafted filesystem can be used to disclose information. An attacker can provide a malicious file to trigger this vulnerability.

Affected products

• f2fs-Tools Project f2fs-Tools: before 1.14.0 (fixed in 1.14.0)

Published 2020-10-15. Last modified 2026-06-17.