{"id":"CVE-2026-93816","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: validate inline dentry name lengths before conversion\n\nInline dentry conversion copies names out of the inline dentry area\nbefore checking that each recorded name…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: validate inline dentry name lengths before conversion\n\nInline dentry conversion copies names out of the inline dentry area\nbefore checking that each recorded name…","severity":"high","cvss":7.1,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","vendor":"Linux","product":"Linux","affected":["Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 2ce0bc5853bec7cdc724477a87ea579fde664243","Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 7caa8a0ae94b132576c2e46e9b4fd4e0f356f373","Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < cfcd0e49a178b3dac2c0ece656079081dbf5da74","Linux < 6.12.111","Linux < 6.18.53","Linux (all versions)"],"published":"2026-09-24","updated":"2026-09-25","sourceUpdated":"2026-09-25T13:17:22.463","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-93816","references":[{"url":"https://git.kernel.org/stable/c/2ce0bc5853bec7cdc724477a87ea579fde664243","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/7caa8a0ae94b132576c2e46e9b4fd4e0f356f373","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/cfcd0e49a178b3dac2c0ece656079081dbf5da74","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-09-24T16:47:15.893Z","slug":"CVE-2026-93816","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: validate inline dentry name lengths before conversion\n\nInline dentry conversion copies names out of the inline dentry area\nbefore checking that each recorded name length fits in the available\nfilename slots.\n\nA corrupted image can therefore make the conversion path read past\nthe inline filename storage while building the regular dentry block.\n\nValidate each inline dentry name length against the inline filename\narea before copying it.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":39,"depthScoreParts":{"impact":39.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":210563,"id":"CVE-2026-93816","ts":1790316054837,"field":"cvss","old":null,"new":"7.1"},{"seq":210562,"id":"CVE-2026-93816","ts":1790316054837,"field":"severity","old":"none","new":"high"}]}