An out-of-bounds read vulnerability in the Linux kernel ext4 filesystem allows unauthenticated attackers to potentially trigger information disclosure or system instability.

This flaw involves an improper bounds check within the ext4_read_inline_dir function, where a dirent header can be read past the end of its allocated inline buffer. This occurs because the iteration logic uses a larger size than the actual buffer capacity, allowing an unauthenticated attacker to trigger a slab out-of-bounds read during the getdents64 system call.

The vulnerability carries a CVSS score of 9.1, reflecting its potential for significant impact on system availability and data confidentiality. Successful exploitation could lead to kernel memory disclosure or system crashes, resulting in denial of service and potential exposure of sensitive data stored in kernel memory. Given that this involves core filesystem operations, the risk to system integrity is substantial.

Immediate Action: Update the Linux kernel to version 5.15.221, 6.1.188, 6.6.157, 6.12.110, or newer, depending on your current stable branch.

Proactive Monitoring: Monitor system logs for kernel panic events, slab-out-of-bounds errors, or unusual activity associated with the getdents64 system call.

Compensating Controls: Restrict access to filesystem operations for untrusted users and maintain strict separation of duties to limit the potential for local exploitation of kernel-level interfaces.

Public Exploit Available: No

This vulnerability represents a critical risk due to its location within the Linux kernel filesystem layer. Administrators must prioritize patching their kernel versions to the provided stable releases immediately to prevent potential system instability or information disclosure. Failure to update may leave production systems susceptible to kernel-level exploitation.