PT-2026-61132 · Linux · Linux Kernel

CVE-2026-63816 · Published 2026-07-19 · Updated 2026-07-19

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A Use-After-Free (UAF) issue exists in the f2fs component of the Linux kernel. The problem occurs during garbage collection when the system processes the F2FS IOC GARBAGE COLLECT RANGE ioctl. Specifically, a failure to add a reference to fi->atomic inode before accessing its i mapping field can lead to the use of memory after it has been freed, potentially causing a system crash or instability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-63816

Affected Products

Linux Kernel

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-63816 · Security Note
• https://git.kernel.org/stable/c/e0288584baa5dc41df4a829a023c4c1b33fe53d7 · Note
• https://twitter.com/VulmonFeeds/status/2078894592540151936 · Twitter Post
• https://git.kernel.org/stable/c/56038756aae68312df00d4aa1d97e51ef3aca725 · Note
• https://git.kernel.org/stable/c/a499f77c06050a28c897bdbd86cd2f0721ae0743 · Note
• https://git.kernel.org/stable/c/a805fec35c201c59643ddcde713bce4051c8ee27 · Note