{"id":"CVE-2026-80806","revision":"2b0604f4fc644e33b831f13c47d3b924","records":[{"revision":"2b0604f4fc644e33b831f13c47d3b924","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-80806","aliases":[],"title":"ext4: don't enable DAX on new encrypted files","description":"In the Linux kernel, the following vulnerability has been resolved:\n\next4: don't enable DAX on new encrypted files\n\nCurrently, when a new encrypted regular file is created, the call to\next4_set_inode_flags(inode, init=true) in __ext4_new_inode() is made\nbefore EXT4_INODE_ENCRYPT is set.  As a result, it can set S_DAX if the\nfilesystem is mounted with \"-o dax=always\".\n\nEXT4_INODE_ENCRYPT then actually gets set a bit later in\n__ext4_new_inode(), when it calls fscrypt_set_context() which calls\next4_set_context().  ext4_set_context() sets EXT4_INODE_ENCRYPT and\ncalls ext4_set_inode_flags(inode, init=false) to set S_ENCRYPTED too.\n\nThis was intended to clear S_DAX as well.  However, this was broken by\ncommit 043546e46dc7 (\"fs/ext4: Only change S_DAX on inode load\").  This\ncauses data written to the file to bypass encryption, also causing\nxfstests failures such as generic/548 (when \"-o dax=always\" is used).\n\nFix this by simplifying the flow by making __ext4_new_inode() set\nEXT4_INODE_ENCRYPT earlier.  This makes it take effect in\next4_set_inode_flags(inode, init=true), making S_DAX never be set.\n\nSimilarly, make EXT4_STATE_MAY_INLINE_DATA never be set in the first\nplace on new encrypted inodes.  Then it doesn't need to be cleared.\n\nAs a result of these simplifications, ext4_set_context() no longer needs\nto change inode flags or state when 'handle != NULL'.  Remove that too.","state":0,"publishedAt":"2026-09-04T15:13:20.282+00:00","modifiedAt":"2026-10-19T08:43:59.39+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/ext4/crypto.c\",\n                        \"fs/ext4/ialloc.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"043546e46dc70c25ff7e2cf6d09cbb0424fc9978\",\n                            \"lessThan\": \"add98959b220935b243170214c787bc03044a44d\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"043546e46dc70c25ff7e2cf6d09cbb0424fc9978\",\n                            \"lessThan\": \"f53b325068bca0b238c3e0d2eb7de9b1f2268cab\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"043546e46dc70c25ff7e2cf6d09cbb0424fc9978\",\n                            \"lessThan\": \"5959cad3cfa852ec07bbdaf9c17f4838a94a8e6c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"043546e46dc70c25ff7e2cf6d09cbb0424fc9978\",\n                            \"lessThan\": \"a13f61ba9b2a7a4ff1f140949ccfad23c5313757\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"043546e46dc70c25ff7e2cf6d09cbb0424fc9978\",\n                            \"lessThan\": \"ed1cd834da65db127f1c30ff67e78f14825a06c1\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"043546e46dc70c25ff7e2cf6d09cbb0424fc9978\",\n                            \"lessThan\": \"458776af0061afec1014cb3cd0061e282e482e83\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"043546e46dc70c25ff7e2cf6d09cbb0424fc9978\",\n                            \"lessThan\": \"3392391b363a63ebb531d45318a729b1c998565b\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"043546e46dc70c25ff7e2cf6d09cbb0424fc9978\",\n                            \"lessThan\": \"e27bae352158c007143d5bb50f3af33a177c0a37\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"043546e46dc70c25ff7e2cf6d09cbb0424fc9978\",\n                            \"lessThan\": \"da32af420d6d466e247c43ac0b829edeac7ae0ad\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/ext4/crypto.c\",\n                        \"fs/ext4/ialloc.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.8\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.8\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.269\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.220\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.187\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.156\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.108\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.47\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.1.11\",\n                            \"lessThanOrEqual\": \"7.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.1\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/add98959b220935b243170214c787bc03044a44d","https://git.kernel.org/stable/c/f53b325068bca0b238c3e0d2eb7de9b1f2268cab","https://git.kernel.org/stable/c/5959cad3cfa852ec07bbdaf9c17f4838a94a8e6c","https://git.kernel.org/stable/c/a13f61ba9b2a7a4ff1f140949ccfad23c5313757","https://git.kernel.org/stable/c/ed1cd834da65db127f1c30ff67e78f14825a06c1","https://git.kernel.org/stable/c/458776af0061afec1014cb3cd0061e282e482e83","https://git.kernel.org/stable/c/3392391b363a63ebb531d45318a729b1c998565b","https://git.kernel.org/stable/c/e27bae352158c007143d5bb50f3af33a177c0a37","https://git.kernel.org/stable/c/da32af420d6d466e247c43ac0b829edeac7ae0ad"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-80806","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-80806","identifiers":["CVE-2026-80806"]},"retained":false,"historicalAffected":[]}],"coverage":[]}