https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 03:44:02 +0000 https://vulnerability.circl.lu/vuln/cve-2026-89841 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>f2fs: only redirty pinned folios in redirty_blocks</p> <p>redirty_blocks() pins folios with read_cache_folio() and then walks the same range again with filemap_lock_folio() to redirty them and drop the references it took.</p> <p>Commit 5951fee46bef (&#34;f2fs: Use a folio in redirty_blocks()&#34;) changed the second pass to a do/while loop. If read_cache_folio() fails before anything is pinned, page_idx does not advance but the cleanup loop still runs once.</p> <p>If readahead has already populated the failed folio in page cache, that extra iteration finds it and folio_put_refs(folio, 2) drops one reference too many. Later drop_caches or reclaim can then report &#34;BUG: Bad page state&#34;.</p> <p>Only redirty the range that was pinned successfully.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>f2fs: only redirty pinned folios in redirty_blocks</p> <p>redirty_blocks() pins folios with read_cache_folio() and then walks the same range again with filemap_lock_folio() to redirty them and drop the references it took.</p> <p>Commit 5951fee46bef (&#34;f2fs: Use a folio in redirty_blocks()&#34;) changed the second pass to a do/while loop. If read_cache_folio() fails before anything is pinned, page_idx does not advance but the cleanup loop still runs once.</p> <p>If readahead has already populated the failed folio in page cache, that extra iteration finds it and folio_put_refs(folio, 2) drops one reference too many. Later drop_caches or reclaim can then report &#34;BUG: Bad page state&#34;.</p> <p>Only redirty the range that was pinned successfully.</p> https://vulnerability.circl.lu/vuln/cve-2026-89841