CVE-2026-92499

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ext4 file system where a corrupted directory can cause a use-after-free error. This occurs when the ext4 readdir() function resumes from an invalid position. Specifically, the ext4 dir llseek() function may invalidate the directory cookie, leading ext4 readdir() to rescan directory entries. If a corrupted rec len is present, it can set an offset where the block lacks sufficient space for a complete directory entry. This can lead to an out-of-bounds access when the rescan process or the main loop passes the entry to the ext4 check dir entry() function, which reads de->rec len before validating the range.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.