What’s Vulnerable › Vulnerabilities

CVE-2026-89831: f2fs: protect critical_task_priority updates with s_umount

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-16 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: f2fs: protect critical_task_priority updates with s_umount The sysfs store path already takes s_umount for GC thread control entries, and ckpt_thread_ioprio is covered as well. critical_task_priority also updates checkpoint or GC kthread scheduling state, but it is not covered by that serialization. It can race with remount or teardown paths that are stopping those threads. Protect critical_task_priority sysfs writes with s_umount too.

Affected products

• Linux kernel: 7.0 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/8e4692c6c165e81b2cbb847d8da4b45a53483b33
• https://git.kernel.org/stable/c/bee6dfcc111b1dffdb3e13d73b7028b699fa0165

Get alerted when CVE-2026-89831 or the next vulnerability affects your stack