CVE-2026-93285: f2fs: embed f2fs_gc_kthread in f2fs_sb_info

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-24 · updated 2026-10-30

Description

In the Linux kernel, the following vulnerability has been resolved: f2fs: embed f2fs_gc_kthread in f2fs_sb_info Instead of allocating f2fs_gc_kthread dynamically, embed it in f2fs_sb_info. This simplifies lifetime management and prepares for fixing race conditions during teardown. - __sbi_store - remount|shutdown - f2fs_stop_gc_thread - access sbi->gc_thread - sbi->gc_thread = NULL - access sbi->gc_thread->f2fs_gc_task

Affected products

Linux: 4.16 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux 7.3. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/23eee01c732ec8c62b05416a05f0f88129df2960
https://git.kernel.org/stable/c/3d7bca9d583793bb7d0bac0d95a24ddd2e129eed
https://git.kernel.org/stable/c/7ee6be9ee7f9a803e0f539af26ab1154fdde48ba
https://git.kernel.org/stable/c/8592a6238d6071fa22228f151abb002db7383750
https://git.kernel.org/stable/c/89c9954739c9b7aaaa1081faa53aa500b734bb93
https://git.kernel.org/stable/c/99d14d61aa8beb6cb9a984b9fcddd45e35b24494
https://git.kernel.org/stable/c/cc004a1107e2c44cbdd2f1b1c2c85d32adc8f731
https://git.kernel.org/stable/c/f13308f19d710c41a91421ad8a9dce5ed9f82ad0

Get alerted when CVE-2026-93285 or the next vulnerability affects your stack