CVE-2026-46094 is a newly published Linux kernel ext4 vulnerability, disclosed by NVD on May 27, 2026, in which a faulty extended-attribute bounds check could allow a four-byte read past the valid xattr region during filesystem metadata validation. The fix is almost comically small: one changed...