CVE-2026-46194: f2fs: fix node_cnt race between extent node destroy and writeback
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Apply the provided kernel patch set that fixes the f2fs node_cnt race between extent node destroy and concurrent kworker writeback by ensuring FI_NO_EXTENT is set under et->lock in __destroy_extent_node(), and that FI_NO_EXTENT is checked for both EX_READ and EX_BLOCK_AGE in __update_extent_tree_range (and related free/destroy paths), preventing f2fs_bug_on(node_cnt) during extent tree updates.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46194?
CVE-2026-46194 has a risk rating of 34, indicating a moderate severity level.
What does CVE-2026-46194 affect?
CVE-2026-46194 affects the Linux kernel's f2fs file system implementation.
How do I fix CVE-2026-46194?
To fix CVE-2026-46194, update to the latest patched version of the Linux kernel.
What is the primary issue in CVE-2026-46194?
CVE-2026-46194 involves a race condition between extent node destruction and writeback, potentially leading to data corruption.
When was CVE-2026-46194 published?
CVE-2026-46194 was published on May 28, 2026.