{
  "cveId": "CVE-2026-89831",
  "url": "https://patchblox.com/security/cve/CVE-2026-89831",
  "summary": "CVE-2026-89831 is fixed in linux on 1 platform by DEBIAN-CVE-2026-89831 (version 7.2.6-1), released September 23, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  f2fs: protect critical_task_priority updates wit...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  f2fs: protect critical_task_priority updates with s_umount  The sysfs store path already takes s_umount for GC thread control entries, and ckpt_thread_ioprio is covered as well.  critical_task_priority also updates checkpoint or GC kthread scheduling state, but it is not covered by that serialization. It can race with remount or teardown paths that are stopping those threads.  Protect critical_task_priority sysfs writes with s_umount too.",
  "published": "2026-09-16T11:16:49Z",
  "severity": "",
  "epss": 0.00198,
  "epssPercentile": 0.09554,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "7.2.6-1",
      "fix": "DEBIAN-CVE-2026-89831",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-89831",
      "released": "2026-09-23T19:19:02Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T13:31:49Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}