Vulnerability in Linux Kernel Affecting F2FS File System by Vendor

CVE-2026-63811

What is CVE-2026-63811?

The Linux kernel has a notable vulnerability in the F2FS file system that relates to atomic writes and Copy-On-Write (COW) data management. When an atomic-write file is updated, the mechanism used to read data from a COW inode may inadvertently access unencrypted data from the original inode, resulting in a general protection fault due to a null pointer dereference. This occurs because encryption policies associated with COW inodes do not align correctly with those of the original files, leading to significant data handling issues. The flaw necessitates architectural adjustments within the F2FS functions to ensure proper encryption context handling and maintain data integrity during read operations.

References