CVE-2026-63811
kernel: f2fs: read COW data with the original inode during atomic write
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · July 19, 2026
Updated · July 21, 2026
Description
A flaw was found in the Linux kernel's f2fs filesystem. During an atomic write operation, the system may attempt to decrypt data using an incorrect encryption context, specifically when the original file is unencrypted but its Copy-On-Write (COW) inode is encrypted. This mismatch can lead to a null-pointer dereference, causing a kernel crash and resulting in a Denial of Service (DoS) for the affected system. A local user could potentially trigger this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-476 · NULL Pointer Dereference