CVE-2026-53303

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the f2fs module, the f2fs sbi show() function reads extension list, extension count, and hot ext count without holding the sb lock. If a concurrent sysfs store operation modifies the extension list through the f2fs update extension list() function, the show path may read inconsistent array contents and counts. This can lead to out-of-bounds access or the display of stale data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.