CVE Database›Document archive›CVE-2026-63811

CVE-2026-63811

kernel: f2fs: read COW data with the original inode during atomic write

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 19, 2026

Updated · July 21, 2026

Description

A flaw was found in the Linux kernel's f2fs filesystem. During an atomic write operation, the system may attempt to decrypt data using an incorrect encryption context, specifically when the original file is unencrypted but its Copy-On-Write (COW) inode is encrypted. This mismatch can lead to a null-pointer dereference, causing a kernel crash and resulting in a Denial of Service (DoS) for the affected system. A local user could potentially trigger this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-476 · NULL Pointer Dereference