7.8

CVE-2026-63816

f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode

In the Linux kernel, the following vulnerability has been resolved:

f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode

- ioctl(F2FS_IOC_GARBAGE_COLLECT_RANGE)		- shrink
 - f2fs_gc
  - gc_data_segment
   - ra_data_block(cow_inode)
    - mapping = F2FS_I(inode)->atomic_inode->i_mapping
    : f2fs_is_cow_file(cow_inode) is true
						 - f2fs_evict_inode(atomic_inode)
						  - clear_inode_flag(fi->cow_inode, FI_COW_FILE)
						  - F2FS_I(fi->cow_inode)->atomic_inode = NULL
						  ...
						  - truncate_inode_pages_final(atomic_inode)
    - f2fs_grab_cache_folio(mapping)
    : create folio in atomic_inode->mapping
						  - clear_inode(atomic_inode)
						   - BUG_ON(atomic_inode->i_data.nrpages)

We need to add a reference on fi->atomic_inode before using its mapping
field during garbage collection, otherwise, it will cause UAF issue.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 3db1de0e582c358dd013f3703cd55b5fe4076436
Version < 7d3ae21783e5914c1761ac7d63f882d3d70800e9
Status affected
Version 3db1de0e582c358dd013f3703cd55b5fe4076436
Version < 56038756aae68312df00d4aa1d97e51ef3aca725
Status affected
Version 3db1de0e582c358dd013f3703cd55b5fe4076436
Version < a499f77c06050a28c897bdbd86cd2f0721ae0743
Status affected
Version 3db1de0e582c358dd013f3703cd55b5fe4076436
Version < a805fec35c201c59643ddcde713bce4051c8ee27
Status affected
Version 3db1de0e582c358dd013f3703cd55b5fe4076436
Version < e0288584baa5dc41df4a829a023c4c1b33fe53d7
Status affected
Version 6db52f1944417c2601182a591a704e2f119c5215
Status affected
Version 5.18.18
Version < 5.19
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.19
Status affected
Version 0
Version < 5.19
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.96
Status unaffected
Version <= 6.18.*
Version 6.18.39
Status unaffected
Version <= 7.1.*
Version 7.1.3
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.027
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/56038756aae68312df00d4aa1d97e51ef3aca725
https://git.kernel.org/stable/c/a499f77c06050a28c897bdbd86cd2f0721ae0743
https://git.kernel.org/stable/c/a805fec35c201c59643ddcde713bce4051c8ee27
https://git.kernel.org/stable/c/e0288584baa5dc41df4a829a023c4c1b33fe53d7
https://git.kernel.org/stable/c/7d3ae21783e5914c1761ac7d63f882d3d70800e9