CVE-2026-89833

Not scored yetLast modified Oct 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages()

There is potential deadloop in race condition:

Thread A Thread B - fsync - f2fs_do_sync_file - f2fs_fsync_node_pages - last_fsync_dnode - folio_get(last_folio) - f2fs_setattr - f2fs_truncate - f2fs_truncate_blocks - f2fs_do_truncate_blocks - f2fs_truncate_inode_blocks - truncate_dnode - truncate_node - invalidate_mapping_pages - folio->mapping = NULL - is_node_folio alwasy return false - atomic && !marked is always true, then goto retry

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 608514deba38c8611ad330d6a3c8e2b9a1f68e4b, < 64a47dc8286ff98d8c231ae035bdfe16be1b93bf; >= 608514deba38c8611ad330d6a3c8e2b9a1f68e4b, < 58ca9f06480457eb9c9513e1ae2b75316d4ed1e5; >= 608514deba38c8611ad330d6a3c8e2b9a1f68e4b, < bdc06381d590ad5833ee7a2c56b8b685d80ee9b5; >= 608514deba38c8611ad330d6a3c8e2b9a1f68e4b, < 161513f53e4ac90fd356433bdf8e31e6adeb92af; >= 608514deba38c8611ad330d6a3c8e2b9a1f68e4b, < 905411f6504876d268ba8dafc8e75367782da4b7; >= 608514deba38c8611ad330d6a3c8e2b9a1f68e4b, < ce366bfa821ec81dd45bde547ee31e659306cc61
LinuxLinux4.7

References

Timeline

Published
Sep 16, 2026
Last modified
Oct 30, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-89834In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to migrate all curseg types during free_segment_range In freCVE-2026-89835In the Linux kernel, the following vulnerability has been resolved: f2fs: avoid NULL checkpoint thread access in sysfs checkpoint_merge caCVE-2026-898367.8In the Linux kernel, the following vulnerability has been resolved: f2fs: fix folio_nr_pages() race after put in large folio invalidate OuCVE-2026-89837In the Linux kernel, the following vulnerability has been resolved: f2fs: fix dentry folio leak in find_in_level find_in_level() gets a deCVE-2026-898387.1In the Linux kernel, the following vulnerability has been resolved: f2fs: limit recovery filename logging to stored length F2FS stores recCVE-2026-89839In the Linux kernel, the following vulnerability has been resolved: f2fs: use the mount idmap for the owner check in f2fs_xattr_advise_set(CVE-2026-89849.8Autel Maxi Charger Single firmware through V1.03.51 allows unauthenticated remote code execution via the service listening on TCP port 9002.CVE-2026-898407.1In the Linux kernel, the following vulnerability has been resolved: f2fs: validate MOVE_RANGE destination size F2FS_IOC_MOVE_RANGE checks CVE-2026-898417.8In the Linux kernel, the following vulnerability has been resolved: f2fs: only redirty pinned folios in redirty_blocks redirty_blocks() piCVE-2026-89842In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Skip NVMe LS reject IOCB when FW not started qla_nvme_xCVE-2026-89843In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak Several CVE-2026-898448.8In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Hold vport_slock for host map update in report ID acquis
CVE-2026-89833: Unscored | Vulnix