CVE-2026-89954

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The AFS v2 parser fails to validate the footer offset and the region count variable, both of which are retrieved from flash contents. The parser uses the footer offset to locate the image information block within the current erase block and uses region count to iterate through entries in a fixed local array. Because these values are not checked against the erase block boundaries or the local image-info array size, it is possible to cause an underflow during the erase block calculation or an out-of-bounds access when walking region entries.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.