Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-53303

f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show() In f2fs_sbi_show(), the extension_list, extension_count and hot_ext_count are read without holding sbi->sb_lock. If a concurrent sysfs store modifies the extension list via f2fs_update_extension_list(), the show path may read inconsistent count and array contents, potentially leading to out-of-bounds access or displaying stale data. Fix this by holding sb_lock around the entire extension list read and format operation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • b6a06cbbb5f7fd03589cff9178314af04c568826 to < d3ff0c121bbaef026df6248ab7ef6f0b068b0647affected
  • b6a06cbbb5f7fd03589cff9178314af04c568826 to < cea15f66b7b68b2c50943a6660e0692c6635e4ebaffected
  • b6a06cbbb5f7fd03589cff9178314af04c568826 to < 4b3a1bf4c2ffd4c9595d900ead78c9035894a025affected
  • b6a06cbbb5f7fd03589cff9178314af04c568826 to < d0e877810baf613b018fd9747440b9d4d9db1428affected
  • b6a06cbbb5f7fd03589cff9178314af04c568826 to < ea3ab43a1f3cf2c7cecd75c8be1ee99a5e94a92eaffected
  • b6a06cbbb5f7fd03589cff9178314af04c568826 to < 5909bedbed38c558bee7cb6758ceedf9bc3a9194affected

Linux Linux

Default version status: affected

  • 4.17affected
  • 0 to < 4.17unaffected
  • 6.1.175 to ≤ 6.1.*unaffected
  • 6.6.141 to ≤ 6.6.*unaffected
  • 6.12.91 to ≤ 6.12.*unaffected
  • 6.18.33 to ≤ 6.18.*unaffected
  • 7.0.10 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References