PT-2026-61130 · Linux · Linux Kernel

CVE-2026-63814 · Published 2026-07-19 · Updated 2026-07-19

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the f2fs file system where the f2fs acl count() function only validates the aggregate ACL xattr length. A malformed ACL can place ACL USER or ACL GROUP in a slot containing only struct f2fs acl entry short bytes. Consequently, the f2fs acl from disk() function reads the e id variable before verifying if a full entry fits, leading to a buffer over-read. This was evidenced by a KASAN slab-out-of-bounds report in the f2fs get acl() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-63814

Affected Products

Linux Kernel

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2026-63814 · Security Note
• https://git.kernel.org/stable/c/4e2a96ec7236e248e706850568e0a925fd21b588 · Note
• https://git.kernel.org/stable/c/442ca20c54038e2400cf28aaa944cf1de2c8e65d · Note
• https://git.kernel.org/stable/c/aba4f94ac1832c7299c33e1b4fe5f87eef6dc8f1 · Note
• https://git.kernel.org/stable/c/ff83de56882cb8466184d322abece2589258ca56 · Note
• https://git.kernel.org/stable/c/1ddf3fd21c4c652f9cab5552515c04a166662306 · Note
• https://twitter.com/VulmonFeeds/status/2078897153263415719 · Twitter Post
• https://git.kernel.org/stable/c/5d8a39649947a4e86c8fbc682d7fc0041b8d109a · Note
• https://git.kernel.org/stable/c/c4810ada31e80cbe4011467c4f3b1e93f94134f3 · Note
• https://git.kernel.org/stable/c/733cd8474e6d763d75ed96f3f2b98a25480cf2b9 · Note