PT-2026-85647

CVE-2026-80806

·

تاريخ النشر

2026-09-04

·

تاريخ التحديث

2026-11-12

الوصف من

CVSS 3.1
9.8
حرجة
المقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the ext4 file system where new encrypted regular files may have Direct Access (DAX) enabled if the file system is mounted with the -o dax=always option. This occurs because the ext4 set inode flags(inode, init=true) function in ext4 new inode() is called before the EXT4 INODE ENCRYPT flag is set. Consequently, the S DAX flag may be applied, causing data written to the file to bypass encryption. The issue involves the ext4 new inode(), ext4 set context(), and ext4 set inode flags() functions, as well as the EXT4 INODE ENCRYPT and EXT4 STATE MAY INLINE DATA variables.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
AZL-99669
OESA-2026-4357
OPENSUSE-SU-2026:11773-1
USN-8959-1
USN-8960-1
USN-8961-1
USN-8962-1
USN-8963-1
USN-9019-1
USN-9020-1
USN-9021-1
USN-9022-1
USN-9023-1
USN-9024-1
USN-9025-1
USN-9026-1
USN-9029-1
USN-9039-1
USN-9040-1
USN-9066-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾