CVE Explorer

CVE-2026-63812

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix incorrect FI_NO_EXTENT handling in __destroy_extent_node() When __destroy_extent_node() sets the inode flag FI_NO_EXTENT, it does not reset the length of the largest extent to 0 and update the inode folio. Since modifications to the extent tree are disallowed afterward, the cached largest extent may become stale. This can trigger the following error in xfstests generic/388: F2FS-fs (dm-0): sanity_check_extent_cache:

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:0df041a5df682ce529854fdf4aece639138825d2f62f4e238b628e33e5d8b0ef

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/f2fs/extent_cache.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"7.1"},{"lessThan":"7.1","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.144","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.95","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.38","versionType":"semver"},{"lessThanOr…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:03fb383b2147aa6c3e9b14ebd0913c4e020e5719467c7ab0e7a6fc5558661320 · sha256:71867c18108875d7… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/f2fs/extent_cache.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"7e4d8f98be63f98856a5176b9188dada6e7ba9ee","status":"affected","version":"42dd1c91f993431d0b399502479d00e6ad1bca71","versionType":"git"},{"lessThan":"58a5deb220bcac4c73bf58954c0845644c997487","status":"affected","version":"ab1eaf9d5c99042f5b0243bf67a06283a4c0757f","versionType":"git"},{"lessThan":"20190e498057997532c7f186d081011f18e0a462","status":"affected","version":"b0e4395870eb3441ddc959f…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:03fb383b2147aa6c3e9b14ebd0913c4e020e5719467c7ab0e7a6fc5558661320 · sha256:71867c18108875d7… · /containers/cna/affected/0

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:03fb383b2147aa6c3e9b14ebd0913c4e020e5719467c7ab0e7a6fc5558661320 · sha256:71867c18108875d7… · /containers/cna/affected/1

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:03fb383b2147aa6c3e9b14ebd0913c4e020e5719467c7ab0e7a6fc5558661320 · sha256:71867c18108875d7… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:03fb383b2147aa6c3e9b14ebd0913c4e020e5719467c7ab0e7a6fc5558661320 · sha256:71867c18108875d7… · /containers/cna/metrics/0/cvssV3_1

Source references

5 source assertions

{"url":"https://git.kernel.org/stable/c/1f70ddb28a3c71df124da5fa4040c808116d6bb9"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:03fb383b2147aa6c3e9b14ebd0913c4e020e5719467c7ab0e7a6fc5558661320 · sha256:71867c18108875d7… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/20190e498057997532c7f186d081011f18e0a462"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:03fb383b2147aa6c3e9b14ebd0913c4e020e5719467c7ab0e7a6fc5558661320 · sha256:71867c18108875d7… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/58a5deb220bcac4c73bf58954c0845644c997487"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:03fb383b2147aa6c3e9b14ebd0913c4e020e5719467c7ab0e7a6fc5558661320 · sha256:71867c18108875d7… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/7e4d8f98be63f98856a5176b9188dada6e7ba9ee"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:03fb383b2147aa6c3e9b14ebd0913c4e020e5719467c7ab0e7a6fc5558661320 · sha256:71867c18108875d7… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/edf12cbeeeabe799bd2ee21fdb5c336cce6fbad7"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:03fb383b2147aa6c3e9b14ebd0913c4e020e5719467c7ab0e7a6fc5558661320 · sha256:71867c18108875d7… · /containers/cna/references/3

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer