CVE-2026-89833

CVE-2026-89833

published September 16, 2026

CVSS
—
EPSS
0%
Percentile
10.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages()

There is potential deadloop in race condition:

Thread A Thread B

- fsync

- f2fs_do_sync_file

- f2fs_fsync_node_pages

- last_fsync_dnode

- folio_get(last_folio)

- f2fs_setattr

- f2fs_truncate

- f2fs_truncate_blocks

- f2fs_do_truncate_blocks

- f2fs_truncate_inode_blocks

- truncate_dnode

- truncate_node

- invalidate_mapping_pages

- folio->mapping = NULL

- is_node_folio alwasy return false

- atomic && !marked is always true,

then goto retry

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00209 · 10.5th percentile
Published
2026-09-16T15:16Z
References (5)
EPSS history
Timeline
  • 18 SEP 04:02Z
    EPSS moved — → 0%
    epss
  • 16 SEP 10:31Z
    f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages()
    cvelistv5