CVE-2026-63818

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> f2fs: validate orphan inode entry count<br /> <br /> f2fs_recover_orphan_inodes() trusts the orphan block entry_count when<br /> replaying orphan inodes from the checkpoint pack. A corrupted entry_count<br /> larger than F2FS_ORPHANS_PER_BLOCK makes the recovery loop read past the<br /> ino[] array and interpret footer or following data as inode numbers.<br /> <br /> On a crafted image, mounting an unpatched kernel can drive orphan recovery<br /> into f2fs_bug_on() and panic the kernel. Validate entry_count before<br /> consuming entries so corrupted checkpoint data fails the mount with<br /> -EFSCORRUPTED and requests fsck instead.<br /> <br /> Set ERROR_INCONSISTENT_ORPHAN as well, so the corruption reason can be<br /> recorded in the superblock s_errors[] field. This gives fsck a persistent<br /> hint even though mount-time orphan recovery failure may leave no chance to<br /> persist SBI_NEED_FSCK through a checkpoint.