CVE-2026-63815

A flaw was found in the Linux kernel's f2fs (Flash-Friendly File System) component. When processing a specially crafted f2fs filesystem image, an attacker can trigger an out-of-bounds read. This occurs because the system incorrectly validates the size of inline extended attributes, leading to negative calculations that cause the system to read beyond allocated memory. This vulnerability can result in information disclosure or system instability, and may also lead to data corruption for regular files.