CVE-2026-89838

In the Linux kernel, the following vulnerability has been resolved: f2fs: limit recovery filename logging to stored length F2FS stores recovery filenames as a length plus a fixed-size iname buffer. The buffer is not NUL-terminated, but recoverinode and recoverdentry print it with %s. For a 255-by...

CVE-2026-89838

CVE-2026-89838 affects the Linux kernel's F2FS filesystem . The i_name buffer for recovery filenames is not NUL-terminated, yet recover_inode() and recover_dentry() print it with %s. For a 255-byte filename , recovery logging can read past i_name into subsequent raw inode fields. The fix bounds t...

EUVD-2026-80438

In the Linux kernel, the following vulnerability has been resolved: f2fs: limit recovery filename logging to stored length F2FS stores recovery filenames as a length plus a fixed-size iname buffer. The buffer is not NUL-terminated, but recoverinode and recoverdentry print it with %s. For a 255-by...

CVE-2026-89838 f2fs: limit recovery filename logging to stored length

In the Linux kernel, the following vulnerability has been resolved: f2fs: limit recovery filename logging to stored length F2FS stores recovery filenames as a length plus a fixed-size iname buffer. The buffer is not NUL-terminated, but recoverinode and recoverdentry print it with %s. For a 255-by...