{"id":"CVE-2026-89830","summary":"f2fs: fix valid block count leak on data block allocation failure","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix valid block count leak on data block allocation failure\n\nIn __allocate_data_block(), when allocating a new data block\n(dn-\u003edata_blkaddr == NULL_ADDR), inc_valid_block_count() is\ncalled first to increment total_valid_block_count and i_blocks.\nIf the subsequent f2fs_allocate_data_block() fails, the function\nreturns the error directly without rolling back the\nalready-incremented block counts, causing a permanent leak.\n\nFix this by calling dec_valid_block_count() to undo the\nincrement before returning the error. The condition\nold_blkaddr == NULL_ADDR precisely identifies the case where\ninc_valid_block_count() was called.","modified":"2026-09-18T03:48:33.408766651Z","published":"2026-09-16T10:31:02.688Z","database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89830.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/0f9af07ecc1ab486038373db6ae0436c5d674b19"},{"type":"WEB","url":"https://git.kernel.org/stable/c/2d50b6d47e5671ff6a25834c5906d443356191f0"},{"type":"WEB","url":"https://git.kernel.org/stable/c/931e1aa4d44c52ff8e0feb38420a8827c62e886b"},{"type":"WEB","url":"https://git.kernel.org/stable/c/dde99df5a9d3b0ca6ac0a86f98799685f7399432"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89830.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89830"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"7d009e048d7cfcc21d400f2aba4c8bacbdebbd47"},{"fixed":"2d50b6d47e5671ff6a25834c5906d443356191f0"},{"fixed":"dde99df5a9d3b0ca6ac0a86f98799685f7399432"},{"fixed":"931e1aa4d44c52ff8e0feb38420a8827c62e886b"},{"fixed":"0f9af07ecc1ab486038373db6ae0436c5d674b19"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89830.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.9.0"},{"fixed":"6.12.110"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.51"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.2.5"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89830.json"}}],"schema_version":"1.9.0"}