CVE-2026-93285
Received Received - Intake

Memory Corruption in Linux Kernel F2FS

Publication date: 2026-09-24

Last updated on: 2026-09-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: f2fs: embed f2fs_gc_kthread in f2fs_sb_info Instead of allocating f2fs_gc_kthread dynamically, embed it in f2fs_sb_info. This simplifies lifetime management and prepares for fixing race conditions during teardown. - __sbi_store - remount|shutdown - f2fs_stop_gc_thread - access sbi->gc_thread - sbi->gc_thread = NULL - access sbi->gc_thread->f2fs_gc_task

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-24
Last Modified
2026-09-24
Generated
2026-09-24
AI Q&A
2026-09-24
EPSS Evaluated
N/A
NVD
CVE-2026-93285
EUVD
EUVD-2026-86164

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves a flaw in the Linux kernel's F2FS (Flash-Friendly File System) where the garbage collection thread (f2fs_gc_kthread) is dynamically allocated instead of being embedded within the f2fs_sb_info structure. This design choice complicates lifetime management and introduces race conditions during system shutdown or remount operations, potentially leading to undefined behavior or crashes.

Impact Analysis

The vulnerability could cause system instability, crashes, or data corruption during file system operations, particularly when the system is shutting down or remounting the F2FS partition. This may lead to data loss or require a system reboot to recover.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-93285. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart