Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-63811

In the Linux kernel, the following vulnerability has been resolved: f2fs: read COW data with the original inode during atomic write When updating an atomic-write file, f2fs_write_begin() may read the previously written data back from the COW inode: prepare_atomic_write_begin() locates the block in the COW inode and sets use_cow, and the read bio is then built with the COW inode: f2fs_submit_page_read(use_cow ? F2FS_I(inode)->cow_inode : inode, ...); and f2fs_grab_read_bio() decides
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:2a4d3de59d61ab7a30be0f26d30d5e74925ed134e9a5693846881f2fcd4a39a7
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/f2fs/data.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.4"},{"lessThan":"6.4","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"7.1.*","status":"unaffected","version":"7.1.3","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.2-rc1","versionType":"original_commit_for_fix"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:0229fb48bcd9754654595341cefdf6bc2d49df2f3665c2475f1c29534c6c140c · sha256:1ae196e38dd6382c… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/f2fs/data.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"a92332f32a8d31a7eee47b1dc1d751cb3319908f","status":"affected","version":"591fc34e1f98b0d7eef4aa3440bfdff3c5a1cadd","versionType":"git"},{"lessThan":"a41075acde0124d2f8a5f563068a5d63e8ffd57b","status":"affected","version":"591fc34e1f98b0d7eef4aa3440bfdff3c5a1cadd","versionType":"git"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:0229fb48bcd9754654595341cefdf6bc2d49df2f3665c2475f1c29534c6c140c · sha256:1ae196e38dd6382c… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["fs/f2fs/data.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.4"},{"lessThan":"6.4","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"7.1.*","status":"unaffected","version":"7.1.3","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.2-rc1","versionType":"original_commit_for_fix"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:0229fb48bcd9754654595341cefdf6bc2d49df2f3665c2475f1c29534c6c140c · sha256:1ae196e38dd6382c… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/f2fs/data.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"a92332f32a8d31a7eee47b1dc1d751cb3319908f","status":"affected","version":"591fc34e1f98b0d7eef4aa3440bfdff3c5a1cadd","versionType":"git"},{"lessThan":"a41075acde0124d2f8a5f563068a5d63e8ffd57b","status":"affected","version":"591fc34e1f98b0d7eef4aa3440bfdff3c5a1cadd","versionType":"git"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:0229fb48bcd9754654595341cefdf6bc2d49df2f3665c2475f1c29534c6c140c · sha256:1ae196e38dd6382c… · /containers/cna/affected/0

Source references

2 source assertions
{"url":"https://git.kernel.org/stable/c/a41075acde0124d2f8a5f563068a5d63e8ffd57b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0229fb48bcd9754654595341cefdf6bc2d49df2f3665c2475f1c29534c6c140c · sha256:1ae196e38dd6382c… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/a92332f32a8d31a7eee47b1dc1d751cb3319908f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0229fb48bcd9754654595341cefdf6bc2d49df2f3665c2475f1c29534c6c140c · sha256:1ae196e38dd6382c… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer