CVE-2026-31714

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to avoid memory leak in f2fs_rename()

syzbot reported a f2fs bug as below:

BUG: memory leak

unreferenced object 0xffff888127f70830 (size 16):

comm "syz.0.23", pid 6144, jiffies 4294943712

hex dump (first 16 bytes):

3c af 57 72 5b e6 8f ad 6e 8e fd 33 42 39 03 ff <.Wr[...n..3B9..

backtrace (crc 925f8a80):

kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]

slab_post_alloc_hook mm/slub.c:4520 [inline]

slab_alloc_node mm/slub.c:4844 [inline]

__do_kmalloc_node mm/slub.c:5237 [inline]

__kmalloc_noprof+0x3bd/0x560 mm/slub.c:5250

kmalloc_noprof include/linux/slab.h:954 [inline]

fscrypt_setup_filename+0x15e/0x3b0 fs/crypto/fname.c:364

f2fs_setup_filename+0x52/0xb0 fs/f2fs/dir.c:143

f2fs_rename+0x159/0xca0 fs/f2fs/namei.c:961

f2fs_rename2+0xd5/0xf20 fs/f2fs/namei.c:1308

vfs_rename+0x7ff/0x1250 fs/namei.c:6026

filename_renameat2+0x4f4/0x660 fs/name

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References