PT-2026-52942 · Undefined · Undefined

Published 2026-06-26 · Updated 2026-06-26 · CVE-2026-53303

NVD

In the Linux kernel, the following vulnerability has been resolved:

f2fs: protect extension list reading with sb lock in f2fs sbi show()

In f2fs sbi show(), the extension list, extension count and hot ext count are read without holding sbi->sb lock. If a concurrent sysfs store modifies the extension list via f2fs update extension list(), the show path may read inconsistent count and array contents, potentially leading to out-of-bounds access or displaying stale data.

Fix this by holding sb lock around the entire extension list read and format operation.

Related Identifiers

CVE-2026-53303

Affected Products

Undefined

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-53303 · Security Note
• https://git.kernel.org/stable/c/ea3ab43a1f3cf2c7cecd75c8be1ee99a5e94a92e · Note
• https://git.kernel.org/stable/c/d0e877810baf613b018fd9747440b9d4d9db1428 · Note
• https://git.kernel.org/stable/c/cea15f66b7b68b2c50943a6660e0692c6635e4eb · Note
• https://git.kernel.org/stable/c/4b3a1bf4c2ffd4c9595d900ead78c9035894a025 · Note
• https://git.kernel.org/stable/c/5909bedbed38c558bee7cb6758ceedf9bc3a9194 · Note
• https://git.kernel.org/stable/c/d3ff0c121bbaef026df6248ab7ef6f0b068b0647 · Note