PT-2026-44317 · Linux · Linux Kernel

Published 2026-05-28 · Updated 2026-06-10 · CVE-2026-46194

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the f2fs file system between the destruction of extent nodes and the writeback process. The function f2fs destroy extent node() fails to set the FI NO EXTENT flag before clearing extent nodes. When triggered via f2fs drop inode() with I SYNC set, a concurrent kworker writeback can insert new extent nodes into the same extent tree through the update extent tree range() function. This race can lead to a system crash by triggering f2fs bug on() in destroy extent node() because the node cnt variable becomes greater than zero. Furthermore, update extent tree range() only verifies FI NO EXTENT for the EX READ type, leaving EX BLOCK AGE updates unprotected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

CVE-2026-46194

OPENSUSE-SU-2026:10954-1

Affected Products

Linux Kernel

References · 293

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46194.json · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2026:10954-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46194 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-46194 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-46194 · Vendor Advisory
• https://git.kernel.org/stable/c/42dd1c91f993431d0b399502479d00e6ad1bca71 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-46194 · Security Note
• https://git.kernel.org/stable/c/0559a0e962aacbb47519e26ee663be04b72dcb92 · Patch
• https://cve.org/CVERecord?id=CVE-2026-46194 · Security Note
• https://git.kernel.org/stable/c/b0e4395870eb3441ddc959f6710b5f6ca61aff26 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-46194 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-46194 · Vendor Advisory
• https://git.kernel.org/stable/c/ed78aeebef05212ef7dca93bd931e4eff67c113f · Patch
• https://git.kernel.org/stable/c/ab1eaf9d5c99042f5b0243bf67a06283a4c0757f · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-46194 · Vendor Advisory