CVE-2026-89839

CVE-2026-89839 affects the f2fs filesystem in the Linux kernel. The function f2fs_xattr_advise_set() calls inode_owner_or_capable() with &nop_mnt_idmap instead of the idmap that the VFS passes to the ->set() handler when checking ownership for the "system.advise" xattr . On idmapped mounts , t...