THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-63814 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: f2fs: validate ACL entry sizes in f2fs_acl_from_disk() f2fs_acl_count() only validates the aggregate ACL xattr length. A malformed ACL can still place ACL_USER or ACL_GROUP in a slot that only contains struct f

[NVD] CVE-2026-63814 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: f2fs: validate ACL entry sizes in f2fs_acl_from_disk() f2fs_acl_count() only validates the aggregate ACL xattr length. A malformed ACL can still place ACL_USER or ACL_GROUP in a slot that only contains struct f

mednvdPublished 2026-07-19

CVE-2026-63814 CVSS: 7.8 HIGH Published: 2026-07-19T12:16:54.390

In the Linux kernel, the following vulnerability has been resolved:

f2fs: validate ACL entry sizes in f2fs_acl_from_disk()

f2fs_acl_count() only validates the aggregate ACL xattr length. A malformed ACL can still place ACL_USER or ACL_GROUP in a slot that only contains struct f2fs_acl_entry_short bytes, and f2fs_acl_from_disk() th

Indicators of compromise

CVE-2026-63814cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-63814