Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid UAF in f2fs_write_end_io() As syzbot reported an use-after-free issue in f2fs_write_end_io(). It is caused by below race condition: loop device umount - worker_thread - loop_process_work - do_req_filebacked - lo_rw_aio - lo_rw_aio_complete - blk_mq_end_request - blk_update_request - f2fs_write_end_io - dec_page_count - folio_end_writeback - kill_f2fs_super - kill_block_super - f2fs_put_super : free(sbi) : get_pages(, F2FS_WB_CP_DATA) accessed sbi which is freed In kill_f2fs_super(), we will drop all page caches of f2fs inodes before call free(sbi), it guarantee that all folios should end its writeback, so it should be safe to access sbi before last folio_end_writeback(). Let's relocate ckpt thread wakeup flow before folio_end_writeback() to resolve this issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-04 | 3 | Disclosure1Patch2 |
| 2026-03-18 | 1 | Disclosure1 |
🔴 #Linux Kernel, Use-After-Free, #CVE-2026-23234 (Critical) https://dailycve.com/linux-kernel-use-after-free-cve-2026-23234-critical/
Post summary
A new Linux Kernel use‑after‑free vulnerability, CVE-2026-23234, is announced as critical; the tweet provides minimal technical detail but no PoC, exploit, or patch information.
🚨*CVE* CVE-2026-23234 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid UAF in f2fs_write_end_io() As syzbot reported an use-after-free issue in f2fs… https://www.cve.org/CVERecord?id=CVE-2026-23234 ----- Traducción: CVE-2026-23234 En … http://infoflow.cloud`
Post summary
The post announces that CVE-2026-23234, a use‑after‑free issue in the Linux kernel's f2fs file system, has been patched, providing the fix details but no evidence of exploitation or PoC.
A severe vulnerability was disclosed for Linux Kernel (CVE-2026-23234) https://vuldb.com/?id.348728
Post summary
A severe Linux kernel vulnerability (CVE-2026-23234) has been disclosed with a reference link, but no further technical, exploit, or mitigation details are provided.
CVE-2026-23234 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid UAF in f2fs_write_end_io() As syzbot reported an use-after-free issue in f2fs… https://www.cve.org/CVERecord?id=CVE-2026-23234
Post summary
The Linux kernel f2fs vulnerability CVE‑2026‑23234 has been fixed with a patch that prevents a use‑after‑free in f2fs_write_end_io; no PoC, exploit nor active exploitation claims are mentioned.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | linux | linux_kernel | - | - | - |