CVE-2026-89837: f2fs: fix dentry folio leak in find_in_level

Published Sep 16, 2026
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix dentry folio leak in findinlevel

findinlevel() gets a dentry folio with f2fsfinddatafolio() before calling findinblock(). If findinblock() returns an error, the function stores the error in resfolio and breaks out of the loop without dropping the dentry folio.

This leaks the folio reference on the findinblock() error path. Drop the dentry folio before returning the error to the caller.

Event History

Sep 16, 2026
CVE Published
via MITRE·10:31 AM
Data Sourced
via MITRE·10:31 AM
Description

Frequently Asked Questions

1

Under what condition does the folio reference leak occur?

The leak occurs when f2fs find_in_level() obtains a dentry folio through f2fs_find_data_folio() and the subsequent find_in_block() call returns an error. The error path exits without releasing the acquired dentry folio.

2

What is the operational impact of the affected error path?

Each occurrence leaks a dentry folio reference. The provided information does not describe a direct security impact, affected kernel versions, or exploit prerequisites.

3

How can administrators determine whether their kernel includes the fix?

Check whether the kernel source or applied stable patch set includes one of the referenced fixes: aefb4b0f465b6f95fe02b52d1822a3fb4a9ae922, 93a3e6a4c9e726a13a935963e8dc43d181db1527, or cca7d3e30bf30333314e31bc70b9a739f1342167. The fix drops the dentry folio before returning a find_in_block() error.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203