CVE-2026-97534

{
  "id": "CVE-2026-97534",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "published": "2026-09-25T11:17:03.643",
  "lastModified": "2026-10-30T13:21:06.840",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: accurately adjust free_sections during free_segment_range\n\nIn free_segment_range(), MAIN_SECS(sbi) is temporarily reduced by `secs`\nto restrict block allocation to the safe remaining main area while valid\nblocks in the truncated range are evacuated by GC.\n\nHowever, FREE_I(sbi)->free_sections tracks the total number of free\nsections across the whole filesystem. If any sections within the\ntruncated range were already free upon entering free_segment_range(),\nfailing to deduct them from free_sections causes the filesystem to\noverestimate available free sections in the active, reduced main area.\nThis leads to inconsistent free section accounting during GC data\nmigration and can trigger unexpected allocation failures or assertion\nerrors when space is tight.\n\nFix this by calculating the number of already-free sections in the\ntruncated range, deducting them from free_sections upon entering\nfree_segment_range(), and restoring them on exit."
    }
  ],
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "programFiles": [
            "fs/f2fs/gc.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "b4b10061ef98c583bcf82a4200703fbaa98c18dc",
              "lessThan": "9e7a744c9db8c2d33ed6ac2ff9bca9323a38b038",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "b4b10061ef98c583bcf82a4200703fbaa98c18dc",
              "lessThan": "64a7ed42e9766886dd7300597d90366dfb7a1e53",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "b4b10061ef98c583bcf82a4200703fbaa98c18dc",
              "lessThan": "faeb0a20bdd113311519b598dcc075af3b6fb366",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "b4b10061ef98c583bcf82a4200703fbaa98c18dc",
              "lessThan": "ca31116fad0954c61a0d38163cc51c48e4981b75",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "b4b10061ef98c583bcf82a4200703fbaa98c18dc",
              "lessThan": "8a123a10770d2132d046748f20f02baa8d5539a1",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "b4b10061ef98c583bcf82a4200703fbaa98c18dc",
              "lessThan": "8c963d1738fdca400082ff5f9d99e083de4f4e70",
              "versionType": "git",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "programFiles": [
            "fs/f2fs/gc.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "5.8",
              "status": "affected"
            },
            {
              "version": "0",
              "lessThan": "5.8",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.1.191",
              "lessThanOrEqual": "6.1.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.6.160",
              "lessThanOrEqual": "6.6.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.12.112",
              "lessThanOrEqual": "6.12.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.18.53",
              "lessThanOrEqual": "6.18.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "7.2.7",
              "lessThanOrEqual": "7.2.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "7.3",
              "lessThanOrEqual": "*",
              "versionType": "original_commit_for_fix",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/64a7ed42e9766886dd7300597d90366dfb7a1e53",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/8a123a10770d2132d046748f20f02baa8d5539a1",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/8c963d1738fdca400082ff5f9d99e083de4f4e70",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/9e7a744c9db8c2d33ed6ac2ff9bca9323a38b038",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/ca31116fad0954c61a0d38163cc51c48e4981b75",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/faeb0a20bdd113311519b598dcc075af3b6fb366",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ]
}