Linux Kernel F2FS Missing Read Bio Submission Vulnerability

Vulnerability

A vulnerability in the Linux kernel's F2FS (Flash-Friendly File System) can lead to a deadlock situation where read operations on large folios are not completed. This issue arises because the function responsible for reading data can retain a read bio (block I/O) across multiple readahead folios. If an error occurs with a later folio before its blocks are added to the bio, the folio is not considered part of the bio, and the error handling routine exits without submitting the bio. As a result, the bio for earlier folios remains unsubmitted, causing those folios to miss read completion. Readers can then be left waiting indefinitely on the locked folios.

Impact

This vulnerability can cause a deadlock by leaving folios locked and waiting for read completions that never occur, effectively stalling any processes dependent on those folios.

Remediation

Users can upgrade to the patched version of the Linux kernel available in the Linux kernel stable tree. The specific commit addressing this vulnerability is 48c92559e7b66fdc3cbc74f6e152e66ec0150a0a.

Added: Jul 19, 2026, 12:36 PM
Updated: Jul 19, 2026, 12:36 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
3.5
remediation
7.7
relevance
9.7
threat
3.2
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.