{"id":14892,"date":"2026-09-04T19:02:17","date_gmt":"2026-09-04T11:02:17","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-63817"},"modified":"2026-09-04T19:02:17","modified_gmt":"2026-09-04T11:02:17","slug":"cve-2026-63817","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-63817","title":{"rendered":"CVE-2026-63817 [HIGH] &#8211; In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: validate compre"},"content":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>f2fs: validate compress cache inode only when enabled<\/p>\n<p>F2FS_COMPRESS_INO() uses NM_I(sbi)-&gt;max_nid as the synthetic inode<br \/>\nnumber for the compressed page cache inode. That inode only exists when<br \/>\nthe compress_cache mount option is enabled.<\/p>\n<p>When compress_cache is disabled, max_nid is outside the valid inode<br \/>\nrange. A corrupted directory entry that points to ino == max_nid should<br \/>\ntherefore be rejected by f2fs_check_nid_range(). However, is_meta_ino()<br \/>\ncurrently treats F2FS_COMPRESS_INO() as a meta inode unconditionally,<br \/>\nso f2fs_iget() bypasses do_read_inode() and its nid range check, and<br \/>\ninstantiates a fake internal inode instead.<\/p>\n<p>Gate the compressed cache inode case on COMPRESS_CACHE, matching<br \/>\nf2fs_init_compress_inode(). With compress_cache disabled, ino ==<br \/>\nmax_nid now follows the normal inode path and is rejected as an<br \/>\nout-of-range nid.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>f2fs: validate compress cache inode only when enabled<\/p>\n<p>F2FS_COMPRESS_INO() uses NM_I(sbi)-&gt;max_nid as the synthetic inode<br \/>\nnumber fo<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-14892","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/14892","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=14892"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=14892"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=14892"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}