Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2026-89838 Details

Description

In the Linux kernel, the following vulnerability has been resolved: f2fs: limit recovery filename logging to stored length F2FS stores recovery filenames as a length plus a fixed-size i_name buffer. The buffer is not NUL-terminated, but recover_inode() and recover_dentry() print it with %s. For a 255-byte filename, recovery logging can read past i_name into the following raw inode fields. Print the name with a precision bounded by i_namelen and F2FS_NAME_LEN.

Metrics

CVSS 3.x Severity and Vector Strings:

CNA: kernel.orgCVSS-B:7.1 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://git.kernel.org/stable/c/01027b2fcb74dade59fb833b51023f6593b6a9a2	kernel.org
https://git.kernel.org/stable/c/317d32e1a8deaf1c01c388badc667334c39e62ca	kernel.org
https://git.kernel.org/stable/c/35c5abccd0924b02ad34126f562d93c8d75b0831	kernel.org

Weakness Enumeration

No weakness enumeration is available for this CVE.

Affected Products

No affected product data is available for this CVE.

Change History

3 change records found show changes

Date	Action	Recorded By
Sep 21, 2026	CVE Modified	kernel.org
Sep 16, 2026	CVE Modified	kernel.org
Sep 16, 2026	New CVE Received	kernel.org