All vulnerabilities
CVE-2026-93285

Linux: f2fs: embed f2fs_gc_kthread in f2fs_sb_info

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 5% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in7ee6be9ee7f9a803e0f539af26ab1154fdde48baAlso 23eee01c732ec8c62b05416a05f0f88129df2960, 99d14d61aa8beb6cb9a984b9fcddd45e35b24494 and 1 moreCVE List
Published24 Sep 2026Updated 21 Oct 2026CVE List

What fixes it

  • 7ee6be9ee7f9a803e0f539af26ab1154fdde48baLinuxCVE List
  • 23eee01c732ec8c62b05416a05f0f88129df2960LinuxCVE List
  • 99d14d61aa8beb6cb9a984b9fcddd45e35b24494LinuxCVE List
  • 3d7bca9d583793bb7d0bac0d95a24ddd2e129eedLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

f2fs: embed f2fs_gc_kthread in f2fs_sb_info

Instead of allocating f2fs_gc_kthread dynamically, embed it in f2fs_sb_info. This simplifies lifetime management and prepares for fixing race conditions during teardown.

  • __sbi_store - remount|shutdown
  • f2fs_stop_gc_thread
  • access sbi->gc_thread
  • sbi->gc_thread = NULL
  • access sbi->gc_thread->f2fs_gc_task

Text from CVE List

Affected versions 12

  • Linuxaffected: 7950e9ac638e84518fbdd5c930939ad46a1068c5 before cc004a1107e2c44cbdd2f1b1c2c85d32adc8f731CVE List
  • Linuxaffected: 7950e9ac638e84518fbdd5c930939ad46a1068c5 before 7ee6be9ee7f9a803e0f539af26ab1154fdde48baCVE List
  • Linuxaffected: 7950e9ac638e84518fbdd5c930939ad46a1068c5 before 23eee01c732ec8c62b05416a05f0f88129df2960CVE List
  • Linuxaffected: 7950e9ac638e84518fbdd5c930939ad46a1068c5 before 99d14d61aa8beb6cb9a984b9fcddd45e35b24494CVE List
  • Linuxaffected: 7950e9ac638e84518fbdd5c930939ad46a1068c5 before 3d7bca9d583793bb7d0bac0d95a24ddd2e129eedCVE List
  • Linuxaffected: 4.16CVE List
  • Linuxunaffected: all versions before 4.16CVE List
  • Linuxunaffected: 6.6.160 through 6.6.*CVE List
  • Linuxunaffected: 6.12.112 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2.5 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 5