CVE-2026-74595

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the fscrypt ioctl set policy() function where it incorrectly uses &nop mnt idmap when calling inode owner or capable() to verify ownership before setting an encryption policy. In filesystems supporting idmapped mounts, such as ext4 and f2fs, this causes the system to compare the caller's fsuid against the unmapped on-disk owner instead of the mapped owner. Consequently, the legitimate owner may be denied access with an -EACCES error, while an unauthorized caller might be granted permission.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.