CVE-2026-89836

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the f2fs component when invalidating a large folio from the page cache. The function f2fs get read data folio() calls f2fs folio put() before folio nr pages(), which unlocks the folio and drops the caller reference. This creates a window where a concurrent truncate or folio split can shrink or free the compound folio before the invalidate range is computed. This can result in split sub-folios remaining in mapping->i pages, leading to stale xarray entries, bad page states, and potential livelocks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.