Out-of-bounds read in Linux kernel - CVE-2026-89492
Published: September 12, 2026
Vulnerability identifier: #VU149307
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-89492
CWE-ID: CWE-125
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to read memory beyond the bounds of a directory-index metadata block.
The vulnerability exists due to an out-of-bounds read in the OCFS2 directory index entry-list validation when processing a crafted on-disk image. A local user can supply a crafted image and access an indexed directory to read beyond the entry array.
Exploitation is reachable through path lookup, stat(), or open() operations after the image is mounted.
Affected software
Linux kernel
How to mitigate CVE-2026-89492
Install security update from vendor's repository.