CVE-2026-89831f2fs: protect critical_task_priority updates with s_umount
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: f2fs: protect critical_task_priority updates with s_umount The sysfs store path already takes s_umount for GC thread control entries, and ckpt_thread_ioprio is covered as well. critical_task_priority also updates checkpoint or GC kthread scheduling state, but it is not covered by that serialization. It can race with remount or teardown paths that are stopping those threads. Protect critical_task_priority sysfs writes with s_umount too.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 52190933c37a96164b271f3f30c16099d9eb8c09 before bee6dfcc111b1dffdb3e13d73b7028b699fa0165; 52190933c37a96164b271f3f30c16099d9eb8c09 builds before 8e4692c6c165e81b2cbb847d8da4b45a53483b33 | CNA record |
References
- https://git.kernel.org/stable/c/bee6dfcc111b1dffdb3e13d73b7028b699fa0165
- https://git.kernel.org/stable/c/8e4692c6c165e81b2cbb847d8da4b45a53483b33
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.