{
  "cveId": "CVE-2026-93816",
  "url": "https://patchblox.com/security/cve/CVE-2026-93816",
  "summary": "CVE-2026-93816 is fixed in 2 products on 1 platform, first by DEBIAN-CVE-2026-93816, released September 24, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "f2fs: validate inline dentry name lengths before conversion",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  f2fs: validate inline dentry name lengths before conversion  Inline dentry conversion copies names out of the inline dentry area before checking that each recorded name length fits in the available filename slots.  A corrupted image can therefore make the conversion path read past the inline filename storage while building the regular dentry block.  Validate each inline dentry name length against the inline filename area before copying it.",
  "published": "2026-09-24T17:17:15Z",
  "severity": "Important",
  "cvss": 7.1,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
  "epss": 0.00131,
  "epssPercentile": 0.02738,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93816",
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.190-1",
      "fix": "DEBIAN-CVE-2026-93816",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-93816",
      "released": "2026-09-24T19:30:44Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.12.111-1",
      "fix": "DEBIAN-CVE-2026-93816",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-93816",
      "released": "2026-09-24T19:30:44Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "7.2.6-1",
      "fix": "DEBIAN-CVE-2026-93816",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-93816",
      "released": "2026-09-24T19:30:44Z"
    },
    {
      "platform": "linux",
      "product": "linux-6.12",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.12.111-1~deb12u1",
      "fix": "DEBIAN-CVE-2026-93816",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-93816",
      "released": "2026-09-24T19:30:44Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T07:25:28Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}