CVEvulnerability
CVE-2026-89838
7.1 HIGH
Official page ↗
- Status
- Received
- Published
- 2026-09-16
- Last modified
- 2026-10-21
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 (416baaa9-dc9f-4396-8d5f-8c081fb06d67)
- 7.1 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Description
In the Linux kernel, the following vulnerability has been resolved:
f2fs: limit recovery filename logging to stored length
F2FS stores recovery filenames as a length plus a fixed-size i_name
buffer. The buffer is not NUL-terminated, but recover_inode() and
recover_dentry() print it with %s.
For a 255-byte filename, recovery logging can read past i_name into the
following raw inode fields.
Print the name with a precision bounded by i_namelen and F2FS_NAME_LEN.
References
- https://git.kernel.org/stable/c/01027b2fcb74dade59fb833b51023f6593b6a9a2 git.kernel.org
- https://git.kernel.org/stable/c/317d32e1a8deaf1c01c388badc667334c39e62ca git.kernel.org
- https://git.kernel.org/stable/c/35c5abccd0924b02ad34126f562d93c8d75b0831 git.kernel.org
- https://git.kernel.org/stable/c/7ab1780074943508534343e1e5e5ab0c9ef9dd7b git.kernel.org
- https://git.kernel.org/stable/c/e754120f8ede55cc773ade108cf7e5b17c859c46 git.kernel.org