GHSA-f86r-w2jg-m648unknown
In the Linux kernel, the following vulnerability has been resolved: fs,fsverity: remove check...
🔗 CVE IDs covered (1)
📋 Description
In the Linux kernel, the following vulnerability has been resolved:
fs,fsverity: remove check for fsverity being enabled in setattr_prepare()
The check that fs-verity is available in the kernel is not necessary here. Filesystems could have fsverity files even without fs-verity enabled. In that case, truncate on fsverity file will succeed, what this check is trying to prevent.
🔗 References (7)
- https://nvd.nist.gov/vuln/detail/CVE-2026-74596
- https://git.kernel.org/stable/c/2d2b2ed7bdcc6df4942292318c5455b5e94ba525
- https://git.kernel.org/stable/c/d2f96bcb89d36d488a10e3bcf819b98536968286
- https://git.kernel.org/stable/c/b4c0c41b952c21baed3f822eab508ebbd1d355d9
- https://git.kernel.org/stable/c/fd4ed50c134fd9f2334b8b29d117f3af5fe250e9
- https://git.kernel.org/stable/c/3f3b0898557a93122a7f941e6a89adef2bb29ce4
- https://github.com/advisories/GHSA-f86r-w2jg-m648