CVE-2026-63816

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode<br /> <br /> - ioctl(F2FS_IOC_GARBAGE_COLLECT_RANGE) - shrink<br /> - f2fs_gc<br /> - gc_data_segment<br /> - ra_data_block(cow_inode)<br /> - mapping = F2FS_I(inode)-&gt;atomic_inode-&gt;i_mapping<br /> : f2fs_is_cow_file(cow_inode) is true<br /> - f2fs_evict_inode(atomic_inode)<br /> - clear_inode_flag(fi-&gt;cow_inode, FI_COW_FILE)<br /> - F2FS_I(fi-&gt;cow_inode)-&gt;atomic_inode = NULL<br /> ...<br /> - truncate_inode_pages_final(atomic_inode)<br /> - f2fs_grab_cache_folio(mapping)<br /> : create folio in atomic_inode-&gt;mapping<br /> - clear_inode(atomic_inode)<br /> - BUG_ON(atomic_inode-&gt;i_data.nrpages)<br /> <br /> We need to add a reference on fi-&gt;atomic_inode before using its mapping<br /> field during garbage collection, otherwise, it will cause UAF issue.