CVE-2026-53017

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A data loss issue exists in the f2fs file system when fsync is performed on a newly created file concurrently with a checkpoint operation. The problem occurs because the f2fs need inode block update() function incorrectly assumes a checkpoint has finished by checking the IS CHECKPOINTED and HAS LAST FSYNC flags of the nat entry before the checkpoint write has fully completed. This race condition can lead to a Single Point of Failure (SPO) and the loss of the file. The issue is addressed by modifying the f2fs need inode block update() function to acquire the sbi->node write lock before reading the nat entry flags.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.