SECUFOCUSNOW
Home›CVE index›CVE-2026-63815
Review reviewHigh

CVE-2026-63815

Linux

In the Linux kernel, the following vulnerability has been resolved: f2fs: bound i_inline_xattr_size for non-inline-xattr inodes When the flexible_inline_xattr feature is enabled, do_read_inode() loads the on-disk i_inline_xattr_size unconditionally: if (f2fs_sb_has_flexible_inline_xattr(sbi)) fi->i_inline_xattr_size = le16_to_cpu(ri->i_inline_xattr_size); but sanity_check_inode() only range-checks it when the inode also has the FI_INLINE_XATTR flag set. An inode that carries an inline dentry or inline data but not FI_INLINE_XATTR -- the normal layout for an inline directory -- therefore kee...

CVSS
8.4
EPSS
-
- percentile
CISA KEV
Not listed
Published
2026.07.19
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability-
Technical severityCVSS 8.4

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: f2fs: bound i_inline_xattr_size for non-inline-xattr inodes When the flexible_inline_xattr feature is enabled, do_read_inode() loads the on-disk i_inline_xattr_size unconditionally: if (f2fs_sb_has_flexible_inline_xattr(sbi)) fi->i_inline_xattr_size = le16_to_cpu(ri->i_inline_xattr_size); but sanity_check_inode() only range-checks it when the inode also has the FI_INLINE_XATTR flag set. An inode that carries an inline dentry or inline data but not FI_INLINE_XATTR -- the normal layout for an inline directory -- therefore kee...

Affected product and versions

Product
Linux
Affected versions
>= 6afc662e68b5f988282ff20afd58a89b1c279dca < 3c8d6b4093aea40a20596f452289e7c22d84e6d5, >= 6afc662e68b5f988282ff20afd58a89b1c279dca < a08ee30dcbeff6b97df75c38c2589603ddde53a6, >= 6afc662e68b5f988282ff20afd58a89b1c279dca < c3e05522daae4e7348a1ea81eeb321d25aa0fd3b, >= 6afc662e68b5f988282ff20afd58a89b1c279dca < 76e1a05cf6d4051931d7fa4ead51a05786a62918, >= 6afc662e68b5f988282ff20afd58a89b1c279dca < 2a9f9791653ba5ed3fb45bbffa8d63a7cd5cf706, >= 6afc662e68b5f988282ff20afd58a89b1c279dca < 4ce2d52f680c1d8bfdad7cce05b815ea7ca9790d, >= 6afc662e68b5f988282ff20afd58a89b1c279dca < 16bc237ce3c483b75575abea53cfb639745311ed, >= 6afc662e68b5f988282ff20afd58a89b1c279dca < 378acf3cf19b6af6cba55e8dd1154c4e1504bae8, >= 4.15
Fixed versions
No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE
Not available