CVE-2026-68460
kernel: f2fs: fix potential deadlock in f2fs_balance_fs()
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 15, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's f2fs filesystem. When the filesystem space is nearly exhausted, a local attacker could trigger a deadlock within the f2fs_balance_fs() function. This can cause system tasks to become unresponsive, leading to a Denial of Service (DoS) condition.
Statement
This vulnerability is evaluated as having a Moderate impact because exploitation requires an authenticated local attacker to trigger near-exhaustion storage capacity, resulting in a denial of service without compromising confidentiality or integrity. Standard Red Hat Enterprise Linux kernels do not enable or ship support for the f2fs file system, preventing exposure on supported configurations.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-833 · Deadlock