Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-53303

Опубликовано: 26 июн. 2026
Источник: redhat
EPSS Низкий

Описание

A flaw was found in the Linux kernel's f2fs filesystem. This vulnerability allows for potential out-of-bounds memory access or the display of stale data. It occurs because the extension_list and related counts are read without proper synchronization, enabling a concurrent system file system (sysfs) store operation to modify the list while it is being accessed. This inconsistency can lead to system instability or incorrect information being presented.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 10kernelNot affected
Red Hat Enterprise Linux 6kernelNot affected
Red Hat Enterprise Linux 7kernelNot affected
Red Hat Enterprise Linux 7kernel-rtNot affected
Red Hat Enterprise Linux 8kernelNot affected
Red Hat Enterprise Linux 8kernel-rtNot affected
Red Hat Enterprise Linux 9kernelNot affected
Red Hat Enterprise Linux 9kernel-rtNot affected

Показывать по

Дополнительная информация

Дефект:
CWE-366
https://bugzilla.redhat.com/show_bug.cgi?id=2493763kernel: f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show()

EPSS

Процентиль: 3%
0.00126
Низкий

Связанные уязвимости

nvd
около 1 месяца назад

In the Linux kernel, the following vulnerability has been resolved: f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show() In f2fs_sbi_show(), the extension_list, extension_count and hot_ext_count are read without holding sbi->sb_lock. If a concurrent sysfs store modifies the extension list via f2fs_update_extension_list(), the show path may read inconsistent count and array contents, potentially leading to out-of-bounds access or displaying stale data. Fix this by holding sb_lock around the entire extension list read and format operation.

msrc
около 1 месяца назад

f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show()

debian
около 1 месяца назад

In the Linux kernel, the following vulnerability has been resolved: f ...

github
около 1 месяца назад

In the Linux kernel, the following vulnerability has been resolved: f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show() In f2fs_sbi_show(), the extension_list, extension_count and hot_ext_count are read without holding sbi->sb_lock. If a concurrent sysfs store modifies the extension list via f2fs_update_extension_list(), the show path may read inconsistent count and array contents, potentially leading to out-of-bounds access or displaying stale data. Fix this by holding sb_lock around the entire extension list read and format operation.

EPSS

Процентиль: 3%
0.00126
Низкий