CVE record · CVE-2026-89567

jbd2: bound shrinker scans by examined checkpoint buffers

No CVSS scoreEPSS 0.0021 · 10th percentile

Published by the CVE Program (CNA: Linux) at 11 Sept 2026, 19:44 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
Linux	Linux	affected b98dba273a0e47dbfade89c9af73c5b012a4eabb to before 6b5366ba63a58819396045ab146bd37ff9e503c6 git affected b98dba273a0e47dbfade89c9af73c5b012a4eabb to before edf5fcd0469b7467bd5b37a79502c8d9c3257dbb git affected b98dba273a0e47dbfade89c9af73c5b012a4eabb to before 71c6b872c746465fa4b5def239cb296173ca8216 git affected b98dba273a0e47dbfade89c9af73c5b012a4eabb to before c2c0fb364685b8996c357d3b050394959b29d6e0 git affected b98dba273a0e47dbfade89c9af73c5b012a4eabb to before 15cb16496446b94e67f7abcb049b8e2c75cd3d02 git affected 9c31bb2684f8035beca0275349d19d679b679ffb git affected 5fda50e262e65bd553ff777c4b280afd1495a18b git affected 557fda9ed70ebf8eda2620ba3d746215285a1303 git affected 5.15.129 to before 5.16 semver affected 6.1.50 to before 6.2 semver affected 6.4.13 to before 6.5 semver Other versions: unaffected
Linux	Linux	affected 6.5 unaffected before 6.5 semver unaffected 6.6.160 to 6.6., inclusive semver unaffected 6.12.109 to 6.12., inclusive semver unaffected 6.18.50 to 6.18., inclusive semver unaffected 7.2.4 to 7.2., inclusive semver unaffected 7.3 to *, inclusive original_commit_for_fix Other versions: affected

Identifiers: CVE-2026-89567
CNA: Linux
Tags: Linux kernel
Published: 11 Sept 2026
Updated: 21 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

CISA KEV Not listed.
EPSS 0.0021, the 10th percentile, on 14 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 11 Sept 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.