First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-89829

HighCVSS 7.8/10Last modified Oct 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to pass folio->index to f2fs_sanity_check_node_footer()

Otherwise in f2fs_sanity_check_node_footer(), it will check the same nid incorrectly.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
Linux	Linux	>= cd2fec912a0f04390d446ed692f73f2da842855f, < a984446aa9d5b787afa3023fc7b44017b80fe3bc; >= 0a736109c9d29de0c26567e42cb99b27861aa8ba, < 0b196c07407f48a41cd9741cf53e10cb1e23d2e5; >= 0a736109c9d29de0c26567e42cb99b27861aa8ba, < 7e188e9f9437ab47c3237d609f1b26348d6fea1a; 971aa8e2a4043d92bf62061b79f74fd4ac59165a; >= 6.18.13, < 6.18.51; >= 6.19.3, < 6.20
Linux	Linux	7.0

References

Timeline

Published: Sep 16, 2026
Last modified: Oct 19, 2026
NVD status: Received

Related CVEs from 2026

CVE-2026-89839.8Autel Maxi Charger Single firmware through V1.03.51 contains a hard-coded authentication token that bypasses authorization checks for multip CVE-2026-89830In the Linux kernel, the following vulnerability has been resolved: f2fs: fix valid block count leak on data block allocation failure In _CVE-2026-89831In the Linux kernel, the following vulnerability has been resolved: f2fs: protect critical_task_priority updates with s_umount The sysfs s CVE-2026-898327.8In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to clear dirty flag on folio in error path If node block is CVE-2026-89833In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages() There CVE-2026-89834In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to migrate all curseg types during free_segment_range In fre CVE-2026-89835In the Linux kernel, the following vulnerability has been resolved: f2fs: avoid NULL checkpoint thread access in sysfs checkpoint_merge ca CVE-2026-898367.8In the Linux kernel, the following vulnerability has been resolved: f2fs: fix folio_nr_pages() race after put in large folio invalidate Ou CVE-2026-89837In the Linux kernel, the following vulnerability has been resolved: f2fs: fix dentry folio leak in find_in_level find_in_level() gets a de CVE-2026-898387.1In the Linux kernel, the following vulnerability has been resolved: f2fs: limit recovery filename logging to stored length F2FS stores rec CVE-2026-89839In the Linux kernel, the following vulnerability has been resolved: f2fs: use the mount idmap for the owner check in f2fs_xattr_advise_set(CVE-2026-89849.8Autel Maxi Charger Single firmware through V1.03.51 allows unauthenticated remote code execution via the service listening on TCP port 9002.

CVE-2026-89829: High severity, CVSS 7.8 | Vulnix