CVE-2026-63817

kernel: f2fs: validate compress cache inode only when enabled

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 19, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's F2FS file system. When the compress_cache mount option is disabled, a corrupted directory entry could point to an invalid inode number. The system incorrectly processes this as a valid internal inode, bypassing critical validation checks. This vulnerability could lead to unexpected system behavior or potential file system corruption.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-358 · Improperly Implemented Security Check for Standard