CVE-2020-6106

PoC —

CVSS 3.1

5.5 medium

EPSS

2%p73

Published

Oct 15, 2020 (Oct 15, 2020)

Modified

Jun 17, 2026

Description

An exploitable information disclosure vulnerability exists in the init_node_manager functionality of F2fs-Tools F2fs.Fsck 1.12 and 1.13. A specially crafted filesystem can be used to disclose information. An attacker can provide a malicious file to trigger this vulnerability.

Vendors: f2fs-tools project
Products: f2fs-tools
Weakness: CWE-131, CWE-125
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news1 stories

Vulnerability Spotlight: Code execution, information disclosure vulnerabilities in F2FS toolset

Cisco TalosOct 15, 11:03 UTC · Oct 15, 2020Vulnerability in the wildCVE-2020-6104 CVE-2020-6105 CVE-2020-6106+2 CVEs