Description
In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to clear dirty flag on folio in error path

If node block is corrupted due to chksum mismatch or inconsistent
footer info, it needs to drop clear flag of node folio, in order
to persist inconsistent node data to storage.
Published: 2026-09-16
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Data Integrity Compromise
Action: Patch Now
AI Analysis

Impact

The bug in the Linux kernel f2fs file system prevents the dirty flag on a node folio from being cleared when a data corruption error is detected. As a result, corrupted metadata can be written to storage, leading to file system corruption and data loss. The weakness can arise when a node block fails a checksum or footer consistency check, causing the node folio to remain dirty until the following persistence operation writes the flawed data.

Affected Systems

The flaw is present in any Linux kernel that uses the f2fs file system. No specific kernel version is listed in the advisory, so the impact potentially spans all recent distributions that compile the standard Linux kernel with f2fs support.

Risk and Exploitability

The CVSS score of 7.8 indicates a high severity, but the EPSS score of less than 1% suggests that exploitation is unlikely at present. The vulnerability is not listed in CISA’s KEV catalog. An attacker would likely need local access or a program running on the affected system to trigger the corruption path; remote exploitation is currently not documented. The consequence is limited to integrity problems and possible service disruption due to corrupted data or filesystem state.

Generated by OpenCVE AI on September 18, 2026 at 08:51 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest Linux kernel update that contains the f2fs dirty‑flag clear fix.
  • After updating, run f2fsck on affected partitions to identify and repair any corrupted metadata left by the legacy error path.
  • If a timely kernel update is unavailable, consider temporarily disabling or unmounting the f2fs volume and migrating critical data to a more resilient file system such as ext4 or btrfs.

Generated by OpenCVE AI on September 18, 2026 at 08:51 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 03 Oct 2026 11:15:00 +0000


Fri, 18 Sep 2026 09:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-665

Wed, 16 Sep 2026 14:45:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}


Wed, 16 Sep 2026 10:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to clear dirty flag on folio in error path If node block is corrupted due to chksum mismatch or inconsistent footer info, it needs to drop clear flag of node folio, in order to persist inconsistent node data to storage.
Title f2fs: fix to clear dirty flag on folio in error path
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-10-03T10:56:44.539Z

Reserved: 2026-09-11T19:38:34.769Z

Link: CVE-2026-89832

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-16T11:16:49.973

Modified: 2026-10-03T11:17:44.070

Link: CVE-2026-89832

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-18T09:00:08Z

Weaknesses