Go to homepageCyberStrike

Menu

Star on GitHub · 3.2k
Sign inDownload

CVE-2026-53018

5.5 · MEDIUM

In the Linux kernel, the following vulnerability has been resolved: f2fs: avoid reading already updated pages during GC We found the following issue during fuzz testing: page: refcount:3 mapcoun…

Published Jun 24, 2026EPSS 0.16%

Overview

CVE-2026-53018 is a medium-severity vulnerability. It was published on June 24, 2026 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

Technical description

In the Linux kernel, the following vulnerability has been resolved:

f2fs: avoid reading already updated pages during GC

We found the following issue during fuzz testing:

page: refcount:3 mapcount:0 mapping:00000000b6e89c65 index:0x18b2dc pfn:0x161ba9

memcg:f8ffff800e269c00

aops:f2fs_meta_aops ino:2

flags: 0x52880000000080a9(locked|waiters|uptodate|lru|private|zone=1|kasantag=0x4a)

raw: 52880000000080a9 fffffffec6e17588 fffffffec0ccc088 a7ffff8067063618

raw: 000000000018b2dc 0000000000000009 00000003ffffffff f8ffff800e269c00

page dumped because: VM_BUG_ON_FOLIO(folio_test_uptodate(folio))

page_owner tracks the page as allocated

post_alloc_hook+0x58c/0x5ec

prep_new_page+0x34/0x284

get_page_from_freelist+0x2dcc/0x2e8c

__alloc_pages_noprof+0x280/0x76c

__folio_alloc_noprof+0x18/0xac

__filemap_get_folio+0x6bc/0xdc4

pagecache_get_page+0x3c/0x104

do_garbage_collect+0x5c78/0x77a4

f2fs_gc+0xd74/0x25f0

gc_thread_func+0xb28/0x2930

kthread+0x464/0x5d8

ret_from_fork+0x10/0x20

--------

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References

Refgit.kernel.org/stable/c/4623c251496b99c530ce225c05334f4eac8b933aRefgit.kernel.org/stable/c/570e2ccc7cb35fe720106964e65060602d3d2ac4Refgit.kernel.org/stable/c/b663ebb8a340eae5442e605b6acd2cff5677f016

How CyberStrike helps

Frequently asked questions

What is CVE-2026-53018?

CVE-2026-53018 is a medium-severity vulnerability. It was published on June 24, 2026 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

How severe is CVE-2026-53018?

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

How do I fix or remediate CVE-2026-53018?

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

How can CyberStrike help with CVE-2026-53018?

CyberStrike is an open-source, AI-augmented pentesting engine. Rather than flag a version number, it tests whether an issue like CVE-2026-53018 is actually reachable in your own applications and APIs, then verifies each finding before reporting it. That tells you if the weakness is a real, exploitable risk in your environment or a false positive you can safely deprioritize.

Related MEDIUM CVEs from 2026

View all
Browse by year2026202520242023202220212020201920182017201620152014201320122011201020092008200720062005200420032002200120001999