5 matches found
CVE-2026-89786
In the Linux kernel, the following vulnerability has been resolved: ext4: fix out-of-bounds read in ext4readinlinedir ext4readinlinedir can read a dirent header past the end of its inline buffer, triggering a slab-out-of-bounds read during getdents64: BUG: KASAN: slab-out-of-bounds in...
CVE-2026-89786
In the Linux kernel, the following vulnerability has been resolved: ext4: fix out-of-bounds read in ext4readinlinedir ext4readinlinedir can read a dirent header past the end of its inline buffer, triggering a slab-out-of-bounds read during getdents64: BUG: KASAN: slab-out-of-bounds in...
EUVD-2026-80307
In the Linux kernel, the following vulnerability has been resolved: ext4: fix out-of-bounds read in ext4readinlinedir ext4readinlinedir can read a dirent header past the end of its inline buffer, triggering a slab-out-of-bounds read during getdents64: BUG: KASAN: slab-out-of-bounds in...
CVE-2026-89786 ext4: fix out-of-bounds read in ext4_read_inline_dir()
In the Linux kernel, the following vulnerability has been resolved: ext4: fix out-of-bounds read in ext4readinlinedir ext4readinlinedir can read a dirent header past the end of its inline buffer, triggering a slab-out-of-bounds read during getdents64: BUG: KASAN: slab-out-of-bounds in...
CVE-2026-89786
CVE-2026-89786 is an out-of-bounds read in the Linux kernel's ext4 filesystem, specifically in ext4_read_inline_dir(). The dirent buffer is allocated as inline_size bytes, but directory iteration operates in a larger position space (extra_size). Because ext4_check_dir_entry() is called with extra...