---
id: CVE-2026-89831
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  f2fs: protect critical_task_priority updates with s_umount

  The sysfs store path already takes s_umount for GC thread control
  entries, and ckpt_thread_ioprio is covered…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  f2fs: protect critical_task_priority updates with s_umount

  The sysfs store path already takes s_umount for GC thread control
  entries, and ckpt_thread_ioprio is covered…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 52190933c37a96164b271f3f30c16099d9eb8c09 <
    bee6dfcc111b1dffdb3e13d73b7028b699fa0165
  - >-
    Linux >= 52190933c37a96164b271f3f30c16099d9eb8c09 <
    8e4692c6c165e81b2cbb847d8da4b45a53483b33
  - Linux 7.0
published: '2026-09-16'
updated: '2026-09-16'
sourceUpdated: '2026-09-16T11:16:49.870'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-89831'
references:
  - url: 'https://git.kernel.org/stable/c/8e4692c6c165e81b2cbb847d8da4b45a53483b33'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/bee6dfcc111b1dffdb3e13d73b7028b699fa0165'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-16T10:53:54.000Z'
epss: 0.00198
epssPercentile: 0.08511
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

f2fs: protect critical_task_priority updates with s_umount

The sysfs store path already takes s_umount for GC thread control
entries, and ckpt_thread_ioprio is covered as well.

critical_task_priority also updates checkpoint or GC kthread scheduling
state, but it is not covered by that serialization. It can race with
remount or teardown paths that are stopping those threads.

Protect critical_task_priority sysfs writes with s_umount too.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.