AZL-103865

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-103865.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-103865

Upstream

CVE-2026-93285

Published

2026-09-24T17:17:09Z

Modified

2026-09-25T14:15:54Z

Summary

CVE-2026-93285 affecting package kernel 6.6.157.1-1

Details

In the Linux kernel, the following vulnerability has been resolved:

f2fs: embed f2fs_gc_kthread in f2fs_sb_info

Instead of allocating f2fs_gc_kthread dynamically, embed it in f2fs_sb_info. This simplifies lifetime management and prepares for fixing race conditions during teardown.

__sbi_store - remount|shutdown - f2fs_stop_gc_thread
access sbi->gc_thread - sbi->gc_thread = NULL
access sbi->gc_thread->f2fs_gc_task

References

https://nvd.nist.gov/vuln/detail/CVE-2026-93285

Affected packages

Azure Linux:3 / kernel

Package

Name: kernel
Purl: pkg:rpm/azure-linux/kernel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Last Affected

6.6.157.1-1

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-103865.json"