CVE-2026-63814

kernel: f2fs: validate ACL entry sizes in f2fs_acl_from_disk()

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 19, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's Flash-Friendly File System (f2fs). A local attacker could exploit improper validation of Access Control List (ACL) entry sizes to cause a memory corruption, leading to a system crash or denial of service. This occurs when malformed ACL entries cause the system to read beyond its allocated memory.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-125 · Out-of-bounds Read