Vulnerability in OverlayFS on Linux Kernel by the Linux Foundation

CVE-2026-68448

What is CVE-2026-68448?

A vulnerability in OverlayFS within the Linux Kernel enables improper verification of read access permissions during copy operations across different overlay filesystems. This flaw can lead to unintended access being granted to files that should be restricted. Although the system attempts to check permissions using destination overlay filesystem credentials, it fails to adequately verify the rights for source files. This could permit unauthorized file reading, potentially affecting system integrity and data security. It is important for users to be aware of this vulnerability and apply necessary patches to mitigate risks associated with unauthorized file access.

References