CVE Database›Document archive›CVE-2026-63816

CVE-2026-63816

kernel: f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 19, 2026

Updated · October 20, 2026

Description

A flaw was found in the f2fs (Flash-Friendly File System) component of the Linux kernel. This use-after-free (UAF) vulnerability occurs during garbage collection operations when handling Copy-On-Write (COW) files. A local attacker could exploit this by triggering garbage collection, leading to a premature deallocation of memory. Subsequent access to this freed memory could result in a system crash, causing a Denial of Service (DoS), or potentially lead to privilege escalation.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-825 · Expired Pointer Dereference