Improper Check for Unusual or Exceptional Conditions in Linux kernel - CVE-2026-89832

Vulnerability identifier: #VU150461

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-89832

CWE-ID: CWE-754

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to persist inconsistent node data to storage.

The vulnerability exists due to improper error handling in the f2fs node folio error path when processing a node block with a checksum mismatch or inconsistent footer information. A local user can trigger error handling for a corrupted node block to persist inconsistent node data to storage.

Linux kernel
Debian Linux
Ubuntu
linux-nvidia-tegra (Ubuntu package)
linux (Ubuntu package)
linux-aws (Ubuntu package)
linux-gcp (Ubuntu package)
linux-oracle (Ubuntu package)
linux-ibm (Ubuntu package)
linux-hwe-7.0 (Ubuntu package)
linux-oem-7.0 (Ubuntu package)
linux (Debian package)

Install security update from vendor's repository.

linux-nvidia-tegra (Ubuntu package) - update to 6.8.0-1038.42
linux (Ubuntu package) - update to 7.0.0-42.42
linux-aws (Ubuntu package) - update to 7.0.0-1016.17
linux-gcp (Ubuntu package) - update to 7.0.0-1016.18
linux-oracle (Ubuntu package) - update to 7.0.0-1015.16
linux-ibm (Ubuntu package) - update to 7.0.0-1017.17
linux-hwe-7.0 (Ubuntu package) - update to 7.0.0-42.42~24.04.1
linux-oem-7.0 (Ubuntu package) - update to 7.0.0-1017.17
linux (Debian package) - update to 6.12.113-1

• https://git.kernel.org/stable/c/3923ec2b98c96dda4a8bfab81d22553dbf0dd6c2
• https://git.kernel.org/stable/c/5b86eab84ac8e9289b5afc52ef88ab18ba5bacab
• https://git.kernel.org/stable/c/ab35ae07f2b5b4e118ea47b88577fc7d0e797b17

• Improper Check for Unusual or Exceptional Conditions in Linux kernel f2fs
• Debian update for linux
• Ubuntu update for linux-oem-7.0
• Ubuntu update for linux, linux-aws, linux-gcp and more
• Ubuntu update for linux-nvidia-tegra