{"id":"CVE-2026-89830","revision":"33f84005788f46b2af8e321aaad90c3b","records":[{"revision":"33f84005788f46b2af8e321aaad90c3b","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-89830","aliases":[],"title":"f2fs: fix valid block count leak on data block allocation failure","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix valid block count leak on data block allocation failure\n\nIn __allocate_data_block(), when allocating a new data block\n(dn->data_blkaddr == NULL_ADDR), inc_valid_block_count() is\ncalled first to increment total_valid_block_count and i_blocks.\nIf the subsequent f2fs_allocate_data_block() fails, the function\nreturns the error directly without rolling back the\nalready-incremented block counts, causing a permanent leak.\n\nFix this by calling dec_valid_block_count() to undo the\nincrement before returning the error. The condition\nold_blkaddr == NULL_ADDR precisely identifies the case where\ninc_valid_block_count() was called.","state":0,"publishedAt":"2026-09-16T10:31:02.688+00:00","modifiedAt":"2026-10-19T08:53:23.86+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/f2fs/data.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"7d009e048d7cfcc21d400f2aba4c8bacbdebbd47\",\n                            \"lessThan\": \"2d50b6d47e5671ff6a25834c5906d443356191f0\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"7d009e048d7cfcc21d400f2aba4c8bacbdebbd47\",\n                            \"lessThan\": \"dde99df5a9d3b0ca6ac0a86f98799685f7399432\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"7d009e048d7cfcc21d400f2aba4c8bacbdebbd47\",\n                            \"lessThan\": \"931e1aa4d44c52ff8e0feb38420a8827c62e886b\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"7d009e048d7cfcc21d400f2aba4c8bacbdebbd47\",\n                            \"lessThan\": \"0f9af07ecc1ab486038373db6ae0436c5d674b19\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/f2fs/data.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.9\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.9\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.110\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.51\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.5\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/2d50b6d47e5671ff6a25834c5906d443356191f0","https://git.kernel.org/stable/c/dde99df5a9d3b0ca6ac0a86f98799685f7399432","https://git.kernel.org/stable/c/931e1aa4d44c52ff8e0feb38420a8827c62e886b","https://git.kernel.org/stable/c/0f9af07ecc1ab486038373db6ae0436c5d674b19"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-89830","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-89830","identifiers":["CVE-2026-89830"]},"retained":false,"historicalAffected":[]}],"coverage":[]}