Withdrawn: this CVE is not a vulnerability
The assigning CNA withdrew CVE-2026-46194 on 11 August 2026, and it carries the Rejected state at CVE.org and NVD. It must not be treated as a live finding. Its pre-withdrawal severity, score and exploitability are withheld below; the record itself is kept because withdrawals are reversible and because the reject reason is the correction worth publishing.
WITHDRAWN
CVE-2026-46194
f2fs: fix node_cnt race between extent node destroy and writeback
Overview
Description
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Details
INFO
Published Date :
May 28, 2026, 10:16 a.m.
Last Modified :
Aug. 11, 2026, 3:17 a.m.
Remotely Exploit :
—
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Scoring
CVSS Scores
The Common Vulnerability Scoring System is a standardized framework
for assessing the severity of vulnerabilities in software and systems.
We collect and displays CVSS scores from various sources for each CVE.
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | MEDIUM | [email protected] |
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-46194 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-46194 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Rejected by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Aug. 11, 2026
Action Type Old Value New Value -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Aug. 11, 2026
Action Type Old Value New Value Changed Description In the Linux kernel, the following vulnerability has been resolved: f2fs: fix node_cnt race between extent node destroy and writeback f2fs_destroy_extent_node() does not set FI_NO_EXTENT before clearing extent nodes. When called from f2fs_drop_inode() with I_SYNC set, concurrent kworker writeback can insert new extent nodes into the same extent tree, racing with the destroy and triggering f2fs_bug_on() in __destroy_extent_node(). The scenario is as follows: drop inode writeback - iput - f2fs_drop_inode // I_SYNC set - f2fs_destroy_extent_node - __destroy_extent_node - while (node_cnt) { write_lock(&et->lock) __free_extent_tree write_unlock(&et->lock) - __writeback_single_inode - f2fs_outplace_write_data - f2fs_update_read_extent_cache - __update_extent_tree_range // FI_NO_EXTENT not set, // insert new extent node } // node_cnt == 0, exit while - f2fs_bug_on(node_cnt) // node_cnt > 0 Additionally, __update_extent_tree_range() only checks FI_NO_EXTENT for EX_READ type, leaving EX_BLOCK_AGE updates completely unprotected. This patch set FI_NO_EXTENT under et->lock in __destroy_extent_node(), consistent with other callers (__update_extent_tree_range and __drop_extent_tree) and check FI_NO_EXTENT for both EX_READ and EX_BLOCK_AGE tree. Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Removed CVSS V3.1 NIST: AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H Removed CWE NIST: CWE-367 Removed CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.13 up to (excluding) 6.18.30 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.19 up to (excluding) 7.0.7 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.12.5 up to (excluding) 6.12.88 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.6.66 up to (excluding) 6.6.140 Removed Reference kernel.org: https://git.kernel.org/stable/c/0559a0e962aacbb47519e26ee663be04b72dcb92 Removed Reference kernel.org: https://git.kernel.org/stable/c/42dd1c91f993431d0b399502479d00e6ad1bca71 Removed Reference kernel.org: https://git.kernel.org/stable/c/ab1eaf9d5c99042f5b0243bf67a06283a4c0757f Removed Reference kernel.org: https://git.kernel.org/stable/c/b0e4395870eb3441ddc959f6710b5f6ca61aff26 Removed Reference kernel.org: https://git.kernel.org/stable/c/ed78aeebef05212ef7dca93bd931e4eff67c113f Removed Reference Type kernel.org: https://git.kernel.org/stable/c/0559a0e962aacbb47519e26ee663be04b72dcb92 Types: Patch Removed Reference Type kernel.org: https://git.kernel.org/stable/c/42dd1c91f993431d0b399502479d00e6ad1bca71 Types: Patch Removed Reference Type kernel.org: https://git.kernel.org/stable/c/ab1eaf9d5c99042f5b0243bf67a06283a4c0757f Types: Patch Removed Reference Type kernel.org: https://git.kernel.org/stable/c/b0e4395870eb3441ddc959f6710b5f6ca61aff26 Types: Patch Removed Reference Type kernel.org: https://git.kernel.org/stable/c/ed78aeebef05212ef7dca93bd931e4eff67c113f Types: Patch Removed Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '295b50e95e900da31ff237e46e04525fa799b2cf', 'lessThan': '42dd1c91f993431d0b399502479d00e6ad1bca71', 'versionType': 'git'}, {'status': 'affected', 'version': '924f7dd1e832e4e4530d14711db223d2803f7b61', 'lessThan': 'ab1eaf9d5c99042f5b0243bf67a06283a4c0757f', 'versionType': 'git'}, {'status': 'affected', 'version': '3fc5d5a182f6a1f8bd4dc775feb54c369dd2c343', 'lessThan': 'b0e4395870eb3441ddc959f6710b5f6ca61aff26', 'versionType': 'git'}, {'status': 'affected', 'version': '3fc5d5a182f6a1f8bd4dc775feb54c369dd2c343', 'lessThan': '0559a0e962aacbb47519e26ee663be04b72dcb92', 'versionType': 'git'}, {'status': 'affected', 'version': '3fc5d5a182f6a1f8bd4dc775feb54c369dd2c343', 'lessThan': 'ed78aeebef05212ef7dca93bd931e4eff67c113f', 'versionType': 'git'}, {'status': 'affected', 'version': '6.6.66', 'lessThan': '6.6.140', 'versionType': 'semver'}, {'status': 'affected', 'version': '6.12.5', 'lessThan': '6.12.88', 'versionType': 'semver'}], 'programFiles': ['fs/f2fs/extent_cache.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '6.13'}, {'status': 'unaffected', 'version': '0', 'lessThan': '6.13', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '6.6.140', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.88', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.30', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.0.7', 'versionType': 'semver', 'lessThanOrEqual': '7.0.*'}, {'status': 'unaffected', 'version': '7.1', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['fs/f2fs/extent_cache.c'], 'defaultStatus': 'affected'}] -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Jun. 17, 2026
Action Type Old Value New Value Added Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '295b50e95e900da31ff237e46e04525fa799b2cf', 'lessThan': '42dd1c91f993431d0b399502479d00e6ad1bca71', 'versionType': 'git'}, {'status': 'affected', 'version': '924f7dd1e832e4e4530d14711db223d2803f7b61', 'lessThan': 'ab1eaf9d5c99042f5b0243bf67a06283a4c0757f', 'versionType': 'git'}, {'status': 'affected', 'version': '3fc5d5a182f6a1f8bd4dc775feb54c369dd2c343', 'lessThan': 'b0e4395870eb3441ddc959f6710b5f6ca61aff26', 'versionType': 'git'}, {'status': 'affected', 'version': '3fc5d5a182f6a1f8bd4dc775feb54c369dd2c343', 'lessThan': '0559a0e962aacbb47519e26ee663be04b72dcb92', 'versionType': 'git'}, {'status': 'affected', 'version': '3fc5d5a182f6a1f8bd4dc775feb54c369dd2c343', 'lessThan': 'ed78aeebef05212ef7dca93bd931e4eff67c113f', 'versionType': 'git'}, {'status': 'affected', 'version': '6.6.66', 'lessThan': '6.6.140', 'versionType': 'semver'}, {'status': 'affected', 'version': '6.12.5', 'lessThan': '6.12.88', 'versionType': 'semver'}], 'programFiles': ['fs/f2fs/extent_cache.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '6.13'}, {'status': 'unaffected', 'version': '0', 'lessThan': '6.13', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '6.6.140', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.88', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.30', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.0.7', 'versionType': 'semver', 'lessThanOrEqual': '7.0.*'}, {'status': 'unaffected', 'version': '7.1', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['fs/f2fs/extent_cache.c'], 'defaultStatus': 'affected'}] -
Initial Analysis by [email protected]
Jun. 10, 2026
Action Type Old Value New Value Added CVSS V3.1 AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H Added CWE CWE-367 Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.13 up to (excluding) 6.18.30 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.19 up to (excluding) 7.0.7 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.12.5 up to (excluding) 6.12.88 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.6.66 up to (excluding) 6.6.140 Added Reference Type kernel.org: https://git.kernel.org/stable/c/0559a0e962aacbb47519e26ee663be04b72dcb92 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/42dd1c91f993431d0b399502479d00e6ad1bca71 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/ab1eaf9d5c99042f5b0243bf67a06283a4c0757f Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/b0e4395870eb3441ddc959f6710b5f6ca61aff26 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/ed78aeebef05212ef7dca93bd931e4eff67c113f Types: Patch -
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
May. 28, 2026
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: f2fs: fix node_cnt race between extent node destroy and writeback f2fs_destroy_extent_node() does not set FI_NO_EXTENT before clearing extent nodes. When called from f2fs_drop_inode() with I_SYNC set, concurrent kworker writeback can insert new extent nodes into the same extent tree, racing with the destroy and triggering f2fs_bug_on() in __destroy_extent_node(). The scenario is as follows: drop inode writeback - iput - f2fs_drop_inode // I_SYNC set - f2fs_destroy_extent_node - __destroy_extent_node - while (node_cnt) { write_lock(&et->lock) __free_extent_tree write_unlock(&et->lock) - __writeback_single_inode - f2fs_outplace_write_data - f2fs_update_read_extent_cache - __update_extent_tree_range // FI_NO_EXTENT not set, // insert new extent node } // node_cnt == 0, exit while - f2fs_bug_on(node_cnt) // node_cnt > 0 Additionally, __update_extent_tree_range() only checks FI_NO_EXTENT for EX_READ type, leaving EX_BLOCK_AGE updates completely unprotected. This patch set FI_NO_EXTENT under et->lock in __destroy_extent_node(), consistent with other callers (__update_extent_tree_range and __drop_extent_tree) and check FI_NO_EXTENT for both EX_READ and EX_BLOCK_AGE tree. Added Reference https://git.kernel.org/stable/c/0559a0e962aacbb47519e26ee663be04b72dcb92 Added Reference https://git.kernel.org/stable/c/42dd1c91f993431d0b399502479d00e6ad1bca71 Added Reference https://git.kernel.org/stable/c/ab1eaf9d5c99042f5b0243bf67a06283a4c0757f Added Reference https://git.kernel.org/stable/c/b0e4395870eb3441ddc959f6710b5f6ca61aff26 Added Reference https://git.kernel.org/stable/c/ed78aeebef05212ef7dca93bd931e4eff67c113f
EPSS is a daily estimate of the probability of exploitation activity
being observed over the next 30 days. Following chart shows the EPSS
score history of the vulnerability.