PT-2026-22920 · Linux · Linux Kernel

Syzbot · Published 2026-03-04 · Updated 2026-04-20 · CVE-2026-23234

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description The Linux kernel contains a use-after-free issue in the f2fs write end io() function. This issue occurs due to a race condition where memory associated with the superblock (sbi) is freed while still being accessed during writeback operations. The vulnerability was identified through syzbot testing. The race condition involves a loop device, worker thread, and the kill f2fs super() function, which can lead to accessing freed memory. The issue is resolved by relocating the checkpoint thread wakeup flow before folio end writeback().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-23234

ECHO-E059-E89D-F44F

OPENSUSE-SU-2026:10387-1

Affected Products

Linux Kernel

References · 61

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23234.json · Exploit
• https://git.kernel.org/stable/c/cf4a9e1bc8129eb63fda5f8bdcd8d87f0bd76f42 · Patch
• https://git.kernel.org/stable/c/0fb58aff0dafd6837cc91f4154f3ed6e020358fa · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23234 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-23234 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23234 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23234 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2026-23234 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10387-1 · Vendor Advisory
• https://git.kernel.org/stable/c/995030be4ce6338c6ff814583c14166446a64008 · Patch
• https://linux.oracle.com/errata/ELSA-2026-50160.html · Vendor Advisory
• https://git.kernel.org/stable/c/acc2c97fc0005846e5cf11b5ba3189fef130c9b3 · Patch
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2026-23234 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-23234 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-23234 · Security Note