PT-2026-61070 · Linux · Linux Kernel

CVE-2026-53368 · Published 2026-07-19 · Updated 2026-07-19

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An inconsistency in the f2fs file system occurs during fsck operations due to the incorrect usage of nat entry flags. The function f2fs need dentry mark() reads these flags without mutual exclusion from the checkpoint path, which can lead to an incorrect inode block marking state. This happens because the semantics of IS CHECKPOINTED and HAS FSYNCED INODE are only guaranteed after the checkpoint write has fully completed. Consequently, the state observed by f2fs need dentry mark() may differ from the state observed in write node folio() after the sbi->node write lock is acquired.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-53368

Affected Products

Linux Kernel

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-53368 · Security Note
• https://git.kernel.org/stable/c/019f9dda7f66e55eb94cd32e1d3fff5835f73fbc · Note
• https://twitter.com/VulmonFeeds/status/2078787017043796175 · Twitter Post
• https://git.kernel.org/stable/c/b28a83ea4934215b5de906c3ee4fbfbc651573e0 · Note
• https://git.kernel.org/stable/c/bedb710b63ae1bd617e65d0a8cf6cea1200b3753 · Note