CVE-2026-89831

Source
https://cve.org/CVERecord?id=CVE-2026-89831
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89831.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-89831
Downstream
Published
2026-09-16T10:31:03Z
Modified
2026-09-18T03:48:33Z
Summary
f2fs: protect critical_task_priority updates with s_umount
Details

In the Linux kernel, the following vulnerability has been resolved:

f2fs: protect critical_task_priority updates with s_umount

The sysfs store path already takes s_umount for GC thread control entries, and ckpt_thread_ioprio is covered as well.

critical_task_priority also updates checkpoint or GC kthread scheduling state, but it is not covered by that serialization. It can race with remount or teardown paths that are stopping those threads.

Protect critical_task_priority sysfs writes with s_umount too.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89831.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
52190933c37a96164b271f3f30c16099d9eb8c09
Fixed
bee6dfcc111b1dffdb3e13d73b7028b699fa0165
Fixed
8e4692c6c165e81b2cbb847d8da4b45a53483b33

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89831.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
7.0.0
Fixed
7.2.5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89831.json"