CVE-2026-89833

Source
https://cve.org/CVERecord?id=CVE-2026-89833
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89833.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-89833
Downstream
AZL (1)
BELL (1)
CLSA (3)
DEBIAN (1)
MGASA (2)
openSUSE (1)
UBUNTU (1)
Related
Published
2026-09-16T10:31:05Z
Modified
2026-10-28T02:30:30Z
Summary
f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages()
Details

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages()

There is potential deadloop in race condition:

Thread A Thread B

  • fsync
  • f2fs_do_sync_file
  • f2fs_fsync_node_pages
  • last_fsync_dnode - folio_get(last_folio) - f2fs_setattr - f2fs_truncate - f2fs_truncate_blocks - f2fs_do_truncate_blocks - f2fs_truncate_inode_blocks - truncate_dnode - truncate_node - invalidate_mapping_pages - folio->mapping = NULL
  • is_node_folio alwasy return false
  • atomic && !marked is always true, then goto retry
Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89833.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
608514deba38c8611ad330d6a3c8e2b9a1f68e4b
Fixed
58ca9f06480457eb9c9513e1ae2b75316d4ed1e5
Fixed
bdc06381d590ad5833ee7a2c56b8b685d80ee9b5
Fixed
161513f53e4ac90fd356433bdf8e31e6adeb92af
Fixed
905411f6504876d268ba8dafc8e75367782da4b7
Fixed
ce366bfa821ec81dd45bde547ee31e659306cc61

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89833.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.7.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.114
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.51
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89833.json"