CVE-2026-89837

f2fs: fix dentry folio leak in find_in_level

State: Published
Severity: Not scored
Published: Sep 16, 2026
Updated: Oct 30, 2026
Reserved: Sep 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix dentry folio leak in find_in_level

find_in_level() gets a dentry folio with f2fs_find_data_folio() before calling find_in_block(). If find_in_block() returns an error, the function stores the error in res_folio and breaks out of the loop without dropping the dentry folio.

This leaks the folio reference on the find_in_block() error path. Drop the dentry folio before returning the error to the caller.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	7ad08a58bf67594057362e45cbddd3e27e53e557 to before d2011b371fcb9247b2ef4ea2d852401a6c82ab88Affected 7ad08a58bf67594057362e45cbddd3e27e53e557 to before 3b8593f7965fcb22672d98b55ae2e9410ea3d9f7Affected 7ad08a58bf67594057362e45cbddd3e27e53e557 to before b6c0e77d950bf80ab357e2b4b9667f4389ed417cAffected 7ad08a58bf67594057362e45cbddd3e27e53e557 to before af9cc316d31371824de8d409260a2ab9759dd51cAffected 7ad08a58bf67594057362e45cbddd3e27e53e557 to before aefb4b0f465b6f95fe02b52d1822a3fb4a9ae922Affected 7ad08a58bf67594057362e45cbddd3e27e53e557 to before 93a3e6a4c9e726a13a935963e8dc43d181db1527Affected 7ad08a58bf67594057362e45cbddd3e27e53e557 to before cca7d3e30bf30333314e31bc70b9a739f1342167Affected
LinuxLinux	5.11Affected before 5.11Not affected 5.15.224 through 5.15.Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.112 through 6.12.Not affected 6.18.51 through 6.18.Not affected 7.2.5 through 7.2.Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

7ad08a58bf67594057362e45cbddd3e27e53e557 to before d2011b371fcb9247b2ef4ea2d852401a6c82ab88Affected
7ad08a58bf67594057362e45cbddd3e27e53e557 to before 3b8593f7965fcb22672d98b55ae2e9410ea3d9f7Affected
7ad08a58bf67594057362e45cbddd3e27e53e557 to before b6c0e77d950bf80ab357e2b4b9667f4389ed417cAffected
7ad08a58bf67594057362e45cbddd3e27e53e557 to before af9cc316d31371824de8d409260a2ab9759dd51cAffected
7ad08a58bf67594057362e45cbddd3e27e53e557 to before aefb4b0f465b6f95fe02b52d1822a3fb4a9ae922Affected
7ad08a58bf67594057362e45cbddd3e27e53e557 to before 93a3e6a4c9e726a13a935963e8dc43d181db1527Affected
7ad08a58bf67594057362e45cbddd3e27e53e557 to before cca7d3e30bf30333314e31bc70b9a739f1342167Affected

LinuxLinux

5.11Affected
before 5.11Not affected
5.15.224 through 5.15.*Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.112 through 6.12.*Not affected
6.18.51 through 6.18.*Not affected
7.2.5 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.