CVE-2026-46194

kernel: f2fs: fix node_cnt race between extent node destroy and writeback

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 28, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's f2fs filesystem. A race condition exists between the f2fs_destroy_extent_node() function and concurrent writeback operations. This occurs because f2fs_destroy_extent_node() does not properly set a flag (FI_NO_EXTENT) before clearing extent nodes, allowing new extent nodes to be inserted during the destruction process. This can lead to a system crash, resulting in a Denial of Service (DoS).

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition