CVE-2026-68448

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the overlayfs implementation of the copy file range() function. When performing a cross-sb (cross-superblock) copy between two different overlayfs filesystems, the operation uses the mounter credentials of the destination overlayfs. Consequently, the read permission access hook for the source file is called with incorrect credentials. This flaw can lead to unauthorized read access to a file that should be denied or an incorrect denial of access to a copy operation that would otherwise be permitted.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.