CVE-2026-89835

CVE-2026-89835 is a NULL pointer dereference in the Linux kernel's f2fs filesystem . When checkpoint_merge is enabled but no checkpoint thread is running (e.g., on a read-only mount), writing to ckpt_thread_ioprio via sysfs calls set_task_ioprio() on a NULL task pointer (cprc->f2fs_issue_ckpt)...

EUVD-2026-80435

In the Linux kernel, the following vulnerability has been resolved: f2fs: avoid NULL checkpoint thread access in sysfs checkpointmerge can be enabled even when no checkpoint merge thread is running. A read-only mount is one case: f2fs does not start f2fsissueckpt there, but ckptthreadioprio is...