CVE-2026-89786: ext4: fix out-of-bounds read in ext4_read_inline_dir()
Published Sep 16, 2026
·Updated
ext4: fix out-of-bounds read in ext4readinlinedir()
Affected Software
2 affected componentsFixes available
Linux Kernel
Microsoft azl3 kernel 6.6.152.1-1<6.6.157.1-1
6.6.157.1-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.157.1-1
Event History
Sep 16, 2026
CVE Published
via MITRE·08:48 AM
Data Sourced
via MITRE·08:48 AM
DescriptionSeverity
Data Sourced
via NVD·09:17 AM
DescriptionSeverity
Sep 17, 2026
Data Sourced
via Microsoft·08:11 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·08:11 AM
DescriptionSeverity
Frequently Asked Questions
1
When can the invalid read be triggered?
The read occurs while listing directory entries through getdents64(), in the ext4 inline-directory handling path.
2
What evidence may indicate that this issue has occurred?
With KASAN enabled, it can appear as a slab-out-of-bounds read in __ext4_check_dir_entry(), reached through ext4_read_inline_dir() and iterate_dir.