CVE-2026-89837: f2fs: fix dentry folio leak in find_in_level
In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix dentry folio leak in findinlevel
findinlevel() gets a dentry folio with f2fsfinddatafolio() before calling findinblock(). If findinblock() returns an error, the function stores the error in resfolio and breaks out of the loop without dropping the dentry folio.
This leaks the folio reference on the findinblock() error path. Drop the dentry folio before returning the error to the caller.
Event History
Frequently Asked Questions
Under what condition does the folio reference leak occur?
The leak occurs when f2fs find_in_level() obtains a dentry folio through f2fs_find_data_folio() and the subsequent find_in_block() call returns an error. The error path exits without releasing the acquired dentry folio.
What is the operational impact of the affected error path?
Each occurrence leaks a dentry folio reference. The provided information does not describe a direct security impact, affected kernel versions, or exploit prerequisites.
How can administrators determine whether their kernel includes the fix?
Check whether the kernel source or applied stable patch set includes one of the referenced fixes: aefb4b0f465b6f95fe02b52d1822a3fb4a9ae922, 93a3e6a4c9e726a13a935963e8dc43d181db1527, or cca7d3e30bf30333314e31bc70b9a739f1342167. The fix drops the dentry folio before returning a find_in_block() error.