Out-of-Bounds Read in Linux Kernel Ext4 File System

CVE-2026-89786

What is CVE-2026-89786?

A vulnerability in the ext4 file system of the Linux kernel allows for an out-of-bounds read when processing directory entry headers. Specifically, the issue arises in the ext4_read_inline_dir() function, which can read past the end of its inline buffer due to improper calculations of position space and buffer sizes. This oversight can potentially lead to exploitation, resulting in unintended behavior or disclosure of sensitive information. Proper bounds checking is necessary to ensure that any directory entries being processed adhere to the allocated buffer size, thereby maintaining system integrity and security.

References