https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 07:27:02 +0000 https://vulnerability.circl.lu/vuln/cve-2026-89839 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>f2fs: use the mount idmap for the owner check in f2fs_xattr_advise_set()</p> <p>f2fs_xattr_advise_set() calls inode_owner_or_capable() with &amp;nop_mnt_idmap before allowing the &#34;system.advise&#34; xattr to be set, instead of the idmap that the VFS passes to the -&gt;set() handler.</p> <p>f2fs supports idmapped mounts, so on such a mount this checks the caller&#39;s fsuid against the unmapped on-disk owner rather than the mapped owner: the actual owner can be wrongly denied with -EPERM and an unrelated caller wrongly allowed. Pass the handler&#39;s idmap instead.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>f2fs: use the mount idmap for the owner check in f2fs_xattr_advise_set()</p> <p>f2fs_xattr_advise_set() calls inode_owner_or_capable() with &amp;nop_mnt_idmap before allowing the &#34;system.advise&#34; xattr to be set, instead of the idmap that the VFS passes to the -&gt;set() handler.</p> <p>f2fs supports idmapped mounts, so on such a mount this checks the caller&#39;s fsuid against the unmapped on-disk owner rather than the mapped owner: the actual owner can be wrongly denied with -EPERM and an unrelated caller wrongly allowed. Pass the handler&#39;s idmap instead.</p> https://vulnerability.circl.lu/vuln/cve-2026-89839