CVE-2026-74595

Last refreshed2026-10-15

Status: UPDATED | Advisory ID: CVE-2026-74595

Key Details

CVE	CVE-2026-74595
CVSS Score / Version	7.8 (High) / CVSS v3.1
Updated	2026-10-14
CVSS Vector	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
CVSS Prose	attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products	Linux Kernel

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()

fscrypt_ioctl_set_policy() calls inode_owner_or_capable() with

&nop_mnt_idmap before allowing an encryption policy to be set, instead

of the idmap of the mount the ioctl was issued on.

fscrypt is used by filesystems that support idmapped mounts (e.g. ext4,

f2fs), so on such a mount this compares the caller's fsuid against the

unmapped on-disk owner rather than the mapped owner: the actual owner

can be wrongly denied with -EACCES and an unrelated caller wrongly

allowed. Use file_mnt_idmap(filp) instead. (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-74595
CVE	https://www.cve.org/CVERecord?id=CVE-2026-74595

Source

Reference

NVD

CVE