Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV L H L N U N N H 4.7 .0018 7.8 —
AFFECTED Product Versions Fixed Linux 6aa58d8ad20a3323f42274c25820a6f54192422d – — Linux 4.19 – 6.6.23
TIMELINE Feb 19 Reserved by Linux Apr 17 Published (CNA: Linux) Aug 4 RESCORED — CVE-2024-26869 (Linux). CVSS 7.8 → 4.7 (NVD).
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to truncate meta inode pages forcely Below race case can cause data corruption: Thread A GC thread - gc_data_segment - ra_data_block - locked meta_inode page - f2fs_inplace_write_data - invalidate_mapping_pages : fail to invalidate meta_inode page due to lock failure or dirty|writeback status - f2fs_submit_page_bio : write last dirty data to old blkaddr - move_data_block - load old data from meta_inode page - f2fs_submit_page_write : write old data to new blkaddr Because invalidate_mapping_pages() will skip invalidating page which has unclear status including locked, dirty, writeback and so on, so we need to use truncate_inode_pages_range() instead of invalidate_mapping_pages() to make sure meta_inode page will be dropped.
| Date | Event | Detail |
|---|---|---|
| February 19, 2024 | Reserved | Reserved by Linux |
| April 17, 2024 | Published | Published (CNA: Linux) |
| August 4, 2026 | RESCORED | RESCORED — CVE-2024-26869 (Linux). CVSS 7.8 → 4.7 (NVD). |
Authoritative record: CVE-2024-26869 at cve.org
Vendors: linux
Weaknesses: CWE-362
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2024-26869 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.