CVE-2026-63818

A flaw was found in the Linux kernel's F2FS (Flash-Friendly File System) component. This vulnerability arises from improper validation of the orphan inode entry count during the recovery process. A local attacker could craft a malicious F2FS image, which, when mounted on an unpatched system, could lead to a kernel panic, resulting in a Denial of Service (DoS). The system would become unresponsive, requiring a restart.