VYPR

ext2 filesystem driver

by Zephyrproject Rtos

CVEs (1)

  • CVE-2026-10645MedJun 23, 2026
    risk 0.32cvss 4.9epss 0.00

    The Zephyr ext2 filesystem driver (subsys/fs/ext2) trusted the on-disk directory entry fields de_rec_len and de_name_len when walking a directory block. ext2_fetch_direntry() guarded only with de_name_len > EXT2_MAX_FILE_NAME, but de_name_len is a uint8_t and EXT2_MAX_FILE_NAME…