CVE-2026-93816
Received Received - Intake

F2FS Inline Dentry Length Validation Flaw

Publication date: 2026-09-24

Last updated on: 2026-09-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: f2fs: validate inline dentry name lengths before conversion Inline dentry conversion copies names out of the inline dentry area before checking that each recorded name length fits in the available filename slots. A corrupted image can therefore make the conversion path read past the inline filename storage while building the regular dentry block. Validate each inline dentry name length against the inline filename area before copying it.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-24
Last Modified
2026-09-24
Generated
2026-09-24
AI Q&A
2026-09-24
EPSS Evaluated
N/A
NVD
CVE-2026-93816
EUVD
EUVD-2026-86204

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a flaw in the f2fs file system where inline dentry conversion copies name lengths from inline storage without validating if they fit in the available filename slots. A corrupted file system image could cause the conversion process to read past the inline filename storage while creating a regular dentry block.

Detection Guidance

This vulnerability is specific to the Linux kernel's F2FS filesystem and requires direct inspection of filesystem metadata. Detection involves checking for corrupted inline dentry structures in F2FS partitions. Use commands like 'fsck.f2fs' or 'dmesg' to look for filesystem errors or kernel warnings related to F2FS. No network-specific detection methods are applicable.

Impact Analysis

This vulnerability could lead to memory corruption or crashes if a corrupted file system image is mounted. It may cause data loss, system instability, or denial of service by triggering kernel panics or unexpected behavior during file operations.

Mitigation Strategies

Apply the latest Linux kernel patches that address this issue. Avoid using F2FS for critical data until patched. Monitor kernel logs for F2FS-related errors. If corruption is suspected, back up data and run filesystem checks with 'fsck.f2fs'.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-93816. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart