CVE-2026-68459

CVE CVE-2026-68459EUVD EUVD-2026-59081Published 2026-08-15T05:51:19.000ZLast changed 2026-08-17T05:06:00.000Z

What the advisory describes

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs() When we mount device w/ gc_merge mount option, we may suffer below potential deadlock: Kworker GC trehad Truncator - f2fs_write_cache_pages - f2fs_write_single_data_page - f2fs_do_write_data_page - folio_start_writeback --- set writeback flag on folio - f2fs_outplace_write_data : cached folio in internal bio cache - f2fs_balance_fs - wake_up(gc_thread) : wake up gc thread to run foreground GC - finish_wait(fggc_wq) : wait on the waitqueue --- wait on GC thread to finish the work - truncate_inode_pages_range - __filemap_get_folio(, FGP_LOCK) --- lock folio - truncate_inode_partial_folio - folio_wait_writeback --- wait on writeback being cleared - do_garbage_collect - move_data_page - f2fs_get_lock_data_folio - lock on folio --- blocked on folio's lock In order to avoid such deadlock, let's call below functions to commit cached bios in GC_MERGE path of f2fs_balance_fs() as the same as we did in NOGC_MERGE path. - f2fs_submit_merged_write(sbi, DATA); - f2fs_submit_all_merged_ipu_writes(sbi);

Source: EUVD (ENISA), in the words of the advisory.

Products the advisory names

These come from the advisory itself, not from any check we performed.

Linux — Linux 351df4b201157351c7d26bf12c3eeb9dbce98854 <89479a27fa4e1e11f378b3724944eabceb84f114; 351df4b201157351c7d26bf12c3eeb9dbce98854 <8071500a8124e5a6d47d901a8d5ffd91743107a1; 351df4b201157351c7d26bf12c3eeb9dbce98854 <1436031b33fa23ab1ce7df5bc5500093413e8acf; 351df4b201157351c7d26bf12c3eeb9dbce98854 <b885c7783c19c36c7bf899492a0bffcd68afa8c7; patch: 6.12.96; patch: 0; 351df4b201157351c7d26bf12c3eeb9dbce98854 <8b4468ec023d0d1b4669dfb867588997cc03a06b; 3.8; patch: 7.1.5; patch: 7.2; 351df4b201157351c7d26bf12c3eeb9dbce98854 <aa807064473abd6f2cafe419fb77ea402d3e3104; patch: 5.15.212; patch: 6.18.39; patch: 6.1.178; patch: 6.6.145; 351df4b201157351c7d26bf12c3eeb9dbce98854 <eb02f218aacb36365e0ca2339cbae81fb05d31a5

The versions shown are the advisory's own. Patchlage compares no version numbers and derives no judgement from them — which version is installed is something a person has to look up.

Carried in the product catalogue

An estate covering these products can be recorded in Patchlage. An advisory about them appears in the next morning's situation report.

Linux — Linux

Does this concern one of your customers?

This page cannot answer that — it does not know your estate. Whoever has recorded their environments gets the answer the morning after publication, together with a paragraph they can forward to the customer unedited.

Try it for 28 days

Patchlage reports hits and suspected hits. About everything else this system says nothing — neither this page nor the situation report ever claims that an estate is safe.