CVE-2026-89840 f2fs: validate MOVE_RANGE destination size

In the Linux kernel, the following vulnerability has been resolved: f2fs: validate MOVERANGE destination size F2FSIOCMOVERANGE checks the source range, but not the destination end before updating isize. A source hole can expose this: cloneblkaddrs skips NULLADDR entries and returns success, so th...

CVE-2026-89840

CVE-2026-89840 is a vulnerability in the Linux kernel's f2fs filesystem affecting the F2FS_IOC_MOVE_RANGE ioctl. The ioctl validates the source range but fails to check the destination end before updating i_size. When a source hole is present, __clone_blkaddrs() skips NULL_ADDR entries and return...

EUVD-2026-80440

In the Linux kernel, the following vulnerability has been resolved: f2fs: validate MOVERANGE destination size F2FSIOCMOVERANGE checks the source range, but not the destination end before updating isize. A source hole can expose this: cloneblkaddrs skips NULLADDR entries and returns success, so th...