CVE-2026-89840

Published: Set 16, 2026 Last Modified: Set 16, 2026
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 7,1
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Attack Vector: local
Attack Complexity: low
Privileges Required: low
User Interaction: none
Scope: unchanged
Confidentiality: none
Integrity: high
Availability: high

Description

AI Translation Available

In the Linux kernel, the following vulnerability has been resolved:

f2fs: validate MOVE_RANGE destination size

F2FS_IOC_MOVE_RANGE checks the source range, but not the destination end
before updating i_size. A source hole can expose this: __clone_blkaddrs()
skips NULL_ADDR entries and returns success, so the caller can still extend
the destination inode with unchecked pos_out + len.

Reject destination overflow and use inode_newsize_ok() before extending
the destination inode.

https://git.kernel.org/stable/c/dcae1eeda53149f219dd6af93b3…
https://git.kernel.org/stable/c/dcae1eeda53149f219dd6af93b3083b7271c1c63
https://git.kernel.org/stable/c/e533889fc26aea0cd83c9032706…
https://git.kernel.org/stable/c/e533889fc26aea0cd83c90327063f272061dd820