CVE-2026-63819
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
19/07/2026
Última modificación:
20/07/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
f2fs: fix to do sanity check on f2fs_get_node_folio_ra()<br />
<br />
kernel BUG at fs/f2fs/file.c:845!<br />
Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI<br />
CPU: 0 UID: 0 PID: 5336 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)<br />
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014<br />
RIP: 0010:f2fs_do_truncate_blocks+0x1115/0x1140 fs/f2fs/file.c:845<br />
Code: fc fc 90 0f 0b e8 8b 9d 9a fd 90 0f 0b e8 83 9d 9a fd 48 89 df 48 c7 c6 60 d1 1a 8c e8 54 f1 fc fc 90 0f 0b e8 6c 9d 9a fd 90 0b e8 64 9d 9a fd 90 0f 0b 90 e9 93 fd ff ff e8 56 9d 9a fd 90<br />
RSP: 0018:ffffc9000e4474c0 EFLAGS: 00010283<br />
RAX: ffffffff842b1d34 RBX: 0000000000000003 RCX: 0000000000100000<br />
RDX: ffffc9000f03a000 RSI: 0000000000035503 RDI: 0000000000035504<br />
RBP: ffffc9000e447608 R08: ffff8880123b0000 R09: 0000000000000002<br />
R10: 00000000fffffffe R11: 0000000000000002 R12: 0000000000000001<br />
R13: 0000000000000000 R14: 1ffff92001c88ea0 R15: 00000000ffff039c<br />
FS: 00007f7e02ee36c0(0000) GS:ffff88808c887000(0000) knlGS:0000000000000000<br />
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033<br />
CR2: 00007ff0305c4000 CR3: 0000000012d4c000 CR4: 0000000000352ef0<br />
Call Trace:<br />
<br />
f2fs_truncate_blocks+0x10a/0x300 fs/f2fs/file.c:882<br />
f2fs_truncate+0x471/0x7c0 fs/f2fs/file.c:940<br />
f2fs_evict_inode+0xa3f/0x1ac0 fs/f2fs/inode.c:907<br />
evict+0x61e/0xb10 fs/inode.c:841<br />
f2fs_fill_super+0x5f43/0x78f0 fs/f2fs/super.c:5224<br />
get_tree_bdev_flags+0x431/0x4f0 fs/super.c:1694<br />
vfs_get_tree+0x92/0x2a0 fs/super.c:1754<br />
fc_mount fs/namespace.c:1193 [inline]<br />
do_new_mount_fc fs/namespace.c:3758 [inline]<br />
do_new_mount+0x341/0xd30 fs/namespace.c:3834<br />
do_mount fs/namespace.c:4167 [inline]<br />
__do_sys_mount fs/namespace.c:4383 [inline]<br />
__se_sys_mount+0x31d/0x420 fs/namespace.c:4360<br />
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]<br />
do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94<br />
entry_SYSCALL_64_after_hwframe+0x77/0x7f<br />
<br />
count = ADDRS_PER_PAGE(dn.node_folio, inode);<br />
<br />
count -= dn.ofs_in_node;<br />
f2fs_bug_on(sbi, count check whether it is inode|xnode



