{"id":"CVE-2026-89831","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: protect critical_task_priority updates with s_umount\n\nThe sysfs store path already takes s_umount for GC thread control\nentries, and ckpt_thread_ioprio is covered…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: protect critical_task_priority updates with s_umount\n\nThe sysfs store path already takes s_umount for GC thread control\nentries, and ckpt_thread_ioprio is covered…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 52190933c37a96164b271f3f30c16099d9eb8c09 < bee6dfcc111b1dffdb3e13d73b7028b699fa0165","Linux >= 52190933c37a96164b271f3f30c16099d9eb8c09 < 8e4692c6c165e81b2cbb847d8da4b45a53483b33","Linux 7.0"],"published":"2026-09-16","updated":"2026-09-16","sourceUpdated":"2026-09-16T11:16:49.870","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-89831","references":[{"url":"https://git.kernel.org/stable/c/8e4692c6c165e81b2cbb847d8da4b45a53483b33","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/bee6dfcc111b1dffdb3e13d73b7028b699fa0165","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-09-16T10:53:54.000Z","epss":0.00198,"epssPercentile":0.08452,"slug":"CVE-2026-89831","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: protect critical_task_priority updates with s_umount\n\nThe sysfs store path already takes s_umount for GC thread control\nentries, and ckpt_thread_ioprio is covered as well.\n\ncritical_task_priority also updates checkpoint or GC kthread scheduling\nstate, but it is not covered by that serialization. It can race with\nremount or teardown paths that are stopping those threads.\n\nProtect critical_task_priority sysfs writes with s_umount too.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}