CVE-2026-63816
kernel: f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · July 19, 2026
Updated · October 20, 2026
Description
A flaw was found in the f2fs (Flash-Friendly File System) component of the Linux kernel. This use-after-free (UAF) vulnerability occurs during garbage collection operations when handling Copy-On-Write (COW) files. A local attacker could exploit this by triggering garbage collection, leading to a premature deallocation of memory. Subsequent access to this freed memory could result in a system crash, causing a Denial of Service (DoS), or potentially lead to privilege escalation.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-825 · Expired Pointer Dereference