{"id":"CVE-2026-74595","revision":"c15d4806c6ea4d4d90a4b1f0b3a7a593","records":[{"revision":"c15d4806c6ea4d4d90a4b1f0b3a7a593","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-74595","aliases":[],"title":"fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nfscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()\n\nfscrypt_ioctl_set_policy() calls inode_owner_or_capable() with\n&nop_mnt_idmap before allowing an encryption policy to be set, instead\nof the idmap of the mount the ioctl was issued on.\n\nfscrypt is used by filesystems that support idmapped mounts (e.g. ext4,\nf2fs), so on such a mount this compares the caller's fsuid against the\nunmapped on-disk owner rather than the mapped owner: the actual owner\ncan be wrongly denied with -EACCES and an unrelated caller wrongly\nallowed.  Use file_mnt_idmap(filp) instead.","state":0,"publishedAt":"2026-08-22T15:31:45.649+00:00","modifiedAt":"2026-10-16T19:05:59.849+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/crypto/policy.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"14f3db5542e62bcf6fe088a09760ac52d55306c5\",\n                            \"lessThan\": \"174633a468817a49bd474bcfc9067c84e54efe68\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"14f3db5542e62bcf6fe088a09760ac52d55306c5\",\n                            \"lessThan\": \"0baeb730044981f5ec5fb7d62a3763835ea606f6\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"14f3db5542e62bcf6fe088a09760ac52d55306c5\",\n                            \"lessThan\": \"33b7e810ce09955aa02f3b632455cf5e7ac990a9\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"14f3db5542e62bcf6fe088a09760ac52d55306c5\",\n                            \"lessThan\": \"6a67c460b12315033268dce597546984fe5739e7\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"14f3db5542e62bcf6fe088a09760ac52d55306c5\",\n                            \"lessThan\": \"653e888a24c87b8bbeab44d7e558a1c1a3641088\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"14f3db5542e62bcf6fe088a09760ac52d55306c5\",\n                            \"lessThan\": \"98516ba8b817f34e86bdd7a5b7a383cff75c3ddf\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"14f3db5542e62bcf6fe088a09760ac52d55306c5\",\n                            \"lessThan\": \"cf6c993c0feca7984797e634deba3c80342e199a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/crypto/policy.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.12\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.12\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.217\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.184\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.152\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.104\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.45\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.1.9\",\n                            \"lessThanOrEqual\": \"7.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/174633a468817a49bd474bcfc9067c84e54efe68","https://git.kernel.org/stable/c/0baeb730044981f5ec5fb7d62a3763835ea606f6","https://git.kernel.org/stable/c/33b7e810ce09955aa02f3b632455cf5e7ac990a9","https://git.kernel.org/stable/c/6a67c460b12315033268dce597546984fe5739e7","https://git.kernel.org/stable/c/653e888a24c87b8bbeab44d7e558a1c1a3641088","https://git.kernel.org/stable/c/98516ba8b817f34e86bdd7a5b7a383cff75c3ddf","https://git.kernel.org/stable/c/cf6c993c0feca7984797e634deba3c80342e199a"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-74595","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-74595","identifiers":["CVE-2026-74595"]},"retained":false,"historicalAffected":[]}],"coverage":[]}