CVE-2026-93285 f2fs: embed f2fs_gc_kthread in f2fs_sb_info
A race condition in the Linux kernel's f2fs garbage collection thread management can lead to system instability or crashes during teardown.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-93285?
CVE-2026-93285 is a vulnerability in Linux, published on 24 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
f2fs: embed f2fs_gc_kthread in f2fs_sb_info
Instead of allocating f2fs_gc_kthread dynamically, embed it in f2fs_sb_info. This simplifies lifetime management and prepares for fixing race conditions during teardown.
- __sbi_store - remount|shutdown - f2fs_stop_gc_thread - access sbi->gc_thread - sbi->gc_thread = NULL - access sbi->gc_thread->f2fs_gc_task
Which versions are affected by CVE-2026-93285?
How do I fix CVE-2026-93285?
Apply the vendor's patch.
Is CVE-2026-93285 being exploited?
There is no known exploitation of CVE-2026-93285 in the wild and no public exploit code.
Sources
Also known as AZL-103865, BELL-CVE-2026-93285, DEBIAN-CVE-2026-93285, GHSA-g7j3-cmg6-483m, UBUNTU-CVE-2026-93285.