CVE-2026-53303

f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show()

published June 26, 2026

CVSS
—
EPSS
0%
Percentile
5.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show()

In f2fs_sbi_show(), the extension_list, extension_count and

hot_ext_count are read without holding sbi->sb_lock. If a concurrent

sysfs store modifies the extension list via f2fs_update_extension_list(),

the show path may read inconsistent count and array contents, potentially

leading to out-of-bounds access or displaying stale data.

Fix this by holding sb_lock around the entire extension list read

and format operation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00167 · 5.6th percentile
Published
2026-06-26T19:40Z
EPSS history
Timeline
  • 26 JUN 19:40Z
    f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show()
    cvelistv5