CVE-2026-93816

A flaw was found in the Linux kernel's Flash-Friendly File System (F2FS). When converting inline directory entries into standard directory blocks, the kernel does not properly validate recorded filename lengths before copying them. A local user could exploit this flaw by mounting a specially crafted or corrupted file system image to trigger an out-of-bounds memory read. This could result in a system crash leading to a Denial of Service (DoS) or potential unauthorized information disclosure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.