CVE-2026-68459
Received Received - Intake

BaseFortify

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs() When we mount device w/ gc_merge mount option, we may suffer below potential deadlock: Kworker GC trehad Truncator - f2fs_write_cache_pages - f2fs_write_single_data_page - f2fs_do_write_data_page - folio_start_writeback --- set writeback flag on folio - f2fs_outplace_write_data : cached folio in internal bio cache - f2fs_balance_fs - wake_up(gc_thread) : wake up gc thread to run foreground GC - finish_wait(fggc_wq) : wait on the waitqueue --- wait on GC thread to finish the work - truncate_inode_pages_range - __filemap_get_folio(, FGP_LOCK) --- lock folio - truncate_inode_partial_folio - folio_wait_writeback --- wait on writeback being cleared - do_garbage_collect - move_data_page - f2fs_get_lock_data_folio - lock on folio --- blocked on folio's lock In order to avoid such deadlock, let's call below functions to commit cached bios in GC_MERGE path of f2fs_balance_fs() as the same as we did in NOGC_MERGE path. - f2fs_submit_merged_write(sbi, DATA); - f2fs_submit_all_merged_ipu_writes(sbi);

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-68459
EUVD
EUVD-2026-59081

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a potential deadlock vulnerability in the Linux kernel's F2FS (Flash-Friendly File System) when the gc_merge mount option is enabled. It occurs due to a circular wait between the garbage collection thread, kworker, and truncator processes while handling writeback and folio locking operations.

Detection Guidance

This vulnerability is specific to the Linux kernel's F2FS filesystem with the gc_merge mount option. Detection requires checking kernel logs for deadlock warnings or filesystem errors. Use commands like 'dmesg | grep f2fs' or 'journalctl -k | grep f2fs' to search for related errors. Ensure your kernel version is updated to a patched release.

Impact Analysis

If exploited, this deadlock could cause system hangs or freezes, leading to unresponsive applications and potential denial of service. Users may experience system slowdowns or crashes during file operations on systems using F2FS with the gc_merge option.

Mitigation Strategies

Immediately update your Linux kernel to a version that includes the fix for this vulnerability. Disable the gc_merge mount option if it is enabled. Monitor system logs for signs of deadlocks or filesystem issues. Apply patches from your distribution vendor if available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68459. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart