PT-2026-22919 · F2Fs+1 · F2Fs+1

Xiaolong Guo · Published 2026-03-04 · Updated 2026-04-20 · CVE-2026-23233

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.6 and later

Description A flaw exists in the f2fs filesystem within the Linux kernel related to swapfile handling. Specifically, the check swap activate() function incorrectly maps physical blocks when a swapfile is smaller than the f2fs section size (2MB), fragmented, and used with kernel versions 6.6 and later. This incorrect mapping can lead to data corruption, potentially causing dm-verity errors, device reboots, or f2fs node corruption resulting in boot failures. The issue arises because the function fails to map subsequent extents of the swapfile when the first extent is not aligned to section boundaries, leading to subsequent swap writes overwriting incorrect physical locations. The problematic code is located in the check swap activate() function within fs/f2fs/data.c.

Recommendations Update to a newer kernel version that addresses this issue.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-23233

OPENSUSE-SU-2026:10387-1

Affected Products

Linux Kernel

F2Fs

References · 53

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23233.json · Exploit
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-13-CVE-2026-23233 · Vendor Advisory
• https://git.kernel.org/stable/c/fee27b69dde1a05908b350eea42937af2387c4fe · Patch
• https://osv.dev/vulnerability/CVE-2026-23233 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-23233 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23233 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10387-1 · Vendor Advisory
• https://git.kernel.org/stable/c/5c145c03188bc9ba1c29e0bc4d527a5978fc47f9 · Patch
• https://linux.oracle.com/errata/ELSA-2026-50160.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23233 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-23233 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2026-23233 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23233 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-23233 · Vendor Advisory
• https://git.kernel.org/stable/c/1ff415eef513bf12deb058fc50d57788c46c48e6 · Patch