CVE-2026-89837

Source
https://cve.org/CVERecord?id=CVE-2026-89837
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89837.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-89837
Downstream
Related
Published
2026-09-16T10:31:11Z
Modified
2026-10-05T02:30:32Z
Summary
f2fs: fix dentry folio leak in find_in_level
Details

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix dentry folio leak in find_in_level

find_in_level() gets a dentry folio with f2fs_find_data_folio() before calling find_in_block(). If find_in_block() returns an error, the function stores the error in res_folio and breaks out of the loop without dropping the dentry folio.

This leaks the folio reference on the find_in_block() error path. Drop the dentry folio before returning the error to the caller.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89837.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
7ad08a58bf67594057362e45cbddd3e27e53e557
Fixed
af9cc316d31371824de8d409260a2ab9759dd51c
Fixed
aefb4b0f465b6f95fe02b52d1822a3fb4a9ae922
Fixed
93a3e6a4c9e726a13a935963e8dc43d181db1527
Fixed
cca7d3e30bf30333314e31bc70b9a739f1342167

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89837.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
6.12.112
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.51
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89837.json"