Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-31702

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io() In f2fs_compress_write_end_io(), dec_page_count(sbi, type) can bring the F2FS_WB_CP_DATA counter to zero, unblocking f2fs_wait_on_all_pages() in f2fs_put_super() on a concurrent unmount CPU. The unmount path then proceeds to call f2fs_destroy_page_array_cache(sbi), which destroys sbi->page_array_slab via kmem_cache_destroy(), and eventually kfree(sbi). Meanwhile,
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:9db85e690225a05367bc04dee43cb3669e43a01873602727bba99874f98429ed
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/f2fs/compress.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.6"},{"lessThan":"5.6","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.136","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.84","versionType":"semver"},{"lessThanOrEqual…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:98388480f088ddd6dc8b7ac3de354108029475388004477b675f8049f79dc534 · sha256:848089c4a2867a2f… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/f2fs/compress.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"57bc678f36ac03281e877c6b84877b43f964143f","status":"affected","version":"4c8ff7095bef64fc47e996a938f7d57f9e077da3","versionType":"git"},{"lessThan":"ef57cd3329b40c739b9a2e1a8a21ecc4171c6280","status":"affected","version":"4c8ff7095bef64fc47e996a938f7d57f9e077da3","versionType":"git"},{"lessThan":"f5154cf3ce1c8193f0c1891d3769f62740cfe6fe","status":"affected","version":"4c8ff7095bef64fc47e996a938f…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:98388480f088ddd6dc8b7ac3de354108029475388004477b675f8049f79dc534 · sha256:848089c4a2867a2f… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["fs/f2fs/compress.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.6"},{"lessThan":"5.6","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.136","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.84","versionType":"semver"},{"lessThanOrEqual…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:98388480f088ddd6dc8b7ac3de354108029475388004477b675f8049f79dc534 · sha256:848089c4a2867a2f… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/f2fs/compress.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"57bc678f36ac03281e877c6b84877b43f964143f","status":"affected","version":"4c8ff7095bef64fc47e996a938f7d57f9e077da3","versionType":"git"},{"lessThan":"ef57cd3329b40c739b9a2e1a8a21ecc4171c6280","status":"affected","version":"4c8ff7095bef64fc47e996a938f7d57f9e077da3","versionType":"git"},{"lessThan":"f5154cf3ce1c8193f0c1891d3769f62740cfe6fe","status":"affected","version":"4c8ff7095bef64fc47e996a938f…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:98388480f088ddd6dc8b7ac3de354108029475388004477b675f8049f79dc534 · sha256:848089c4a2867a2f… · /containers/cna/affected/0

Source references

6 source assertions
{"url":"https://git.kernel.org/stable/c/2c97dcb6147c8f7f25c629b93be1e69617de5d4a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:98388480f088ddd6dc8b7ac3de354108029475388004477b675f8049f79dc534 · sha256:848089c4a2867a2f… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/39d4ee19c1e7d753dd655aebee632271b171f43a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:98388480f088ddd6dc8b7ac3de354108029475388004477b675f8049f79dc534 · sha256:848089c4a2867a2f… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/57bc678f36ac03281e877c6b84877b43f964143f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:98388480f088ddd6dc8b7ac3de354108029475388004477b675f8049f79dc534 · sha256:848089c4a2867a2f… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/c76cf339b87975ae5b2c06d2d774d5667d25a12a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:98388480f088ddd6dc8b7ac3de354108029475388004477b675f8049f79dc534 · sha256:848089c4a2867a2f… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/ef57cd3329b40c739b9a2e1a8a21ecc4171c6280"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:98388480f088ddd6dc8b7ac3de354108029475388004477b675f8049f79dc534 · sha256:848089c4a2867a2f… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/f5154cf3ce1c8193f0c1891d3769f62740cfe6fe"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:98388480f088ddd6dc8b7ac3de354108029475388004477b675f8049f79dc534 · sha256:848089c4a2867a2f… · /containers/cna/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer