CVE-2026-90419

A flaw was found in the nilfs2 filesystem implementation within the Linux kernel. This vulnerability occurs due to insufficient validation of super-root inode metadata size before parsing. A local attacker could craft a malicious filesystem image that, when processed, causes an out-of-bounds read past the end of the super-root block. This could lead to information disclosure or a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.