🟠 High | Source: Microsoft Security Response Center
CVE-2026-63815 is a Linux kernel vulnerability in the f2fs (Flash-Friendly File System) driver, where the inline xattr size field for certain inodes is not properly bounded. This can lead to out-of-bounds memory access, potentially enabling privilege escalation or system instability. It affects Azure Linux-based virtual machines and container workloads running kernels with the vulnerable f2fs implementation.
Security Architect’s Take: Review whether your Azure Linux VMs or AKS node pools use kernels with f2fs support enabled, and apply Microsoft’s patched kernel updates promptly. If f2fs is not required in your environment, consider disabling the module as a defence-in-depth measure.
Original advisory: CVE-2026-63815 f2fs: bound i_inline_xattr_size for non-inline-xattr inodes