{
  "affected": [
    {
      "ranges": [
        {
          "events": [
            {
              "introduced": "7ad08a58bf67594057362e45cbddd3e27e53e557"
            },
            {
              "fixed": "aefb4b0f465b6f95fe02b52d1822a3fb4a9ae922"
            },
            {
              "fixed": "93a3e6a4c9e726a13a935963e8dc43d181db1527"
            },
            {
              "fixed": "cca7d3e30bf30333314e31bc70b9a739f1342167"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Linux",
        "name": "Kernel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.11.0"
            },
            {
              "fixed": "6.18.51"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.19.0"
            },
            {
              "fixed": "7.2.5"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89837.json"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix dentry folio leak in find_in_level\n\nfind_in_level() gets a dentry folio with f2fs_find_data_folio() before\ncalling find_in_block().  If find_in_block() returns an error, the\nfunction stores the error in res_folio and breaks out of the loop without\ndropping the dentry folio.\n\nThis leaks the folio reference on the find_in_block() error path.  Drop\nthe dentry folio before returning the error to the caller.",
  "id": "CVE-2026-89837",
  "modified": "2026-09-18T03:30:15.653339519Z",
  "published": "2026-09-16T10:31:11.557Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/93a3e6a4c9e726a13a935963e8dc43d181db1527"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/aefb4b0f465b6f95fe02b52d1822a3fb4a9ae922"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/cca7d3e30bf30333314e31bc70b9a739f1342167"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89837.json"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89837"
    },
    {
      "type": "PACKAGE",
      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
    }
  ],
  "schema_version": "1.9.0",
  "summary": "f2fs: fix dentry folio leak in find_in_level"
}