CVE-2026-93285

Received Received - Intake

Memory Corruption in Linux Kernel f2fs

Publication date: 2026-09-24

Last updated on: 2026-10-03

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: f2fs: embed f2fs_gc_kthread in f2fs_sb_info Instead of allocating f2fs_gc_kthread dynamically, embed it in f2fs_sb_info. This simplifies lifetime management and prepares for fixing race conditions during teardown. - __sbi_store - remount|shutdown - f2fs_stop_gc_thread - access sbi->gc_thread - sbi->gc_thread = NULL - access sbi->gc_thread->f2fs_gc_task

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-24

Last Modified

2026-10-03

Generated

2026-10-15

AI Q&A

2026-09-24

EPSS Evaluated

2026-10-13

NVD

CVE-2026-93285

EUVD

EUVD-2026-86164

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability involves a flaw in the Linux kernel's F2FS (Flash-Friendly File System) where the garbage collection thread (f2fs_gc_kthread) is dynamically allocated instead of being embedded within the f2fs_sb_info structure. This design choice complicates lifetime management and introduces race conditions during system shutdown or remount operations, potentially leading to undefined behavior or crashes.

Detection Guidance

This vulnerability is specific to the Linux kernel's F2FS filesystem and does not have a direct network detection method. To check if your system is affected, verify the kernel version and whether it includes the vulnerable code path. Use commands like 'uname -a' to check the kernel version and 'grep CONFIG_F2FS_FS /boot/config-$(uname -r)' to confirm F2FS support.

Impact Analysis

The vulnerability could cause system instability, crashes, or data corruption during file system operations, particularly when the system is shutting down or remounting the F2FS partition. This may lead to data loss or require a system reboot to recover.

Mitigation Strategies

Update the Linux kernel to a patched version that resolves this issue. Monitor your distribution's security advisories for kernel updates. If immediate patching is not possible, consider disabling the F2FS filesystem if not in use by blacklisting the module with 'echo blacklist f2fs >> /etc/modprobe.d/disable-f2fs.conf' and rebooting.

Hi! I’m here to help you understand CVE-2026-93285. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70