CVE-2026-90419

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read exists in the nilfs2 filesystem during super root block parsing. The system trusts the super-root inode metadata size before calling the nilfs read inode common() function. This allows malformed filesystem images to trigger a read operation that extends beyond the end of the super-root block.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.