CVE-2026-63820
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix missing read bio submission on large folio error f2fs_read_data_large_folio() can keep a read bio across multiple readahead folios. If a later folio hits an error before any of its blocks are added to the bio, folio_in_bio is false and the current error path returns immediately after ending that folio. This can leave the bio accumulated for earlier folios unsubmitted. Those folios then never receive read completion, and readers can wait indefinitely on the locked folios. Route errors through the common out path so any pending bio is submitted before returning. Stop consuming more readahead folios once an error is seen, and only wait on and clear the current folio when it was actually added to the bio.
Affected versions
Linux kernel versions
7.0
and later are affected. Fixed in
7.1.3,
7.2-rc1
and their respective stable series.
References
2 totalFrequently asked questions
-
What is CVE-2026-63820?
CVE-2026-63820 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 7.0 onward and has been patched in 7.1.3 and 7.2-rc1. CVE-2026-63820 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-63820?
Yes — CVE-2026-63820 has been patched. Fixed versions include 7.1.3 and 7.2-rc1. If you are running Linux kernel 7.0 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-63820 actively exploited?
No — CVE-2026-63820 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.