Kernel Vulnerability in Linux Affecting File System Management

CVE-2026-53303

What is CVE-2026-53303?

A vulnerability exists in the Linux kernel's f2fs file system where the extension_list, extension_count, and hot_ext_count can be read without the necessary synchronization lock. This oversight allows a concurrent modification during sysfs operations, potentially leading to reading inconsistent data or out-of-bounds accesses. The vulnerability has been addressed by implementing a protective mechanism that locks the sb_lock during extension list operations to ensure data integrity.

References