CVE-2026-68148

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the fscrypt component where the fscrypt direct keys table, used by v1 encryption policies with FSCRYPT POLICY FLAG DIRECT KEY, fails to compare the super block pointer when searching for a fscrypt direct key for an inode. This allows inodes from different superblocks to reference the same fscrypt direct key, potentially extending the key's lifetime beyond the associated superblock and leading to a use-after-free condition. This occurs within the find or insert direct key() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.