CVE-2026-63820

Source
https://cve.org/CVERecord?id=CVE-2026-63820
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-63820.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-63820
Downstream
Published
2026-07-19T12:02:18.211Z
Modified
2026-07-21T03:47:28.751198058Z
Summary
f2fs: fix missing read bio submission on large folio error
Details

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix missing read bio submission on large folio error

f2fsreaddatalargefolio() can keep a read bio across multiple readahead folios. If a later folio hits an error before any of its blocks are added to the bio, folioinbio is false and the current error path returns immediately after ending that folio.

This can leave the bio accumulated for earlier folios unsubmitted. Those folios then never receive read completion, and readers can wait indefinitely on the locked folios.

Route errors through the common out path so any pending bio is submitted before returning. Stop consuming more readahead folios once an error is seen, and only wait on and clear the current folio when it was actually added to the bio.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63820.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
a5d8b9d94e1863f3ebb7182c238b2c713f6f4efd
Fixed
48c92559e7b66fdc3cbc74f6e152e66ec0150a0a
Fixed
74c8d2ec95c59a5651ecd975c466998af1961fd4

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-63820.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
7.0.0
Fixed
7.1.3

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-63820.json"