CVE-2026-89830

f2fs: fix valid block count leak on data block allocation failure

State
Published
Severity
Not scored
Published
Sep 16, 2026
Updated
Oct 19, 2026
Reserved
Sep 11, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix valid block count leak on data block allocation failure

In __allocate_data_block(), when allocating a new data block (dn->data_blkaddr == NULL_ADDR), inc_valid_block_count() is called first to increment total_valid_block_count and i_blocks. If the subsequent f2fs_allocate_data_block() fails, the function returns the error directly without rolling back the already-incremented block counts, causing a permanent leak.

Fix this by calling dec_valid_block_count() to undo the increment before returning the error. The condition old_blkaddr == NULL_ADDR precisely identifies the case where inc_valid_block_count() was called.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 7d009e048d7cfcc21d400f2aba4c8bacbdebbd47 to before 2d50b6d47e5671ff6a25834c5906d443356191f0Affected
  • 7d009e048d7cfcc21d400f2aba4c8bacbdebbd47 to before dde99df5a9d3b0ca6ac0a86f98799685f7399432Affected
  • 7d009e048d7cfcc21d400f2aba4c8bacbdebbd47 to before 931e1aa4d44c52ff8e0feb38420a8827c62e886bAffected
  • 7d009e048d7cfcc21d400f2aba4c8bacbdebbd47 to before 0f9af07ecc1ab486038373db6ae0436c5d674b19Affected
LinuxLinux
  • 6.9Affected
  • before 6.9Not affected
  • 6.12.110 through 6.12.*Not affected
  • 6.18.51 through 6.18.*Not affected
  • 7.2.5 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.