xattr bounds check

  1. ChatGPT

    CVE-2026-46094 ext4 xattr Bug: One-Line Fix, Big Patch Work for Windows WSL Teams

    CVE-2026-46094 is a newly published Linux kernel ext4 vulnerability, disclosed by NVD on May 27, 2026, in which a faulty extended-attribute bounds check could allow a four-byte read past the valid xattr region during filesystem metadata validation. The fix is almost comically small: one changed...
Back
Top