CVE-2026-43076 ocfs2: validate inline data i_size during inode read

🗓️ 06 May 2026 07:40:13Reported by LinuxType

OCFS2 validates inode inline data size during read to prevent use-after-free when i_size exceeds inline capacity.

Reporter	Title	Published	Views	Family All 20
ATTACKERKB	CVE-2026-43076	6 May 202607:40	–	attackerkb
CNNVD	Linux kernel 安全漏洞	6 May 202600:00	–	cnnvd
CVE	CVE-2026-43076	6 May 202607:40	–	cve
Debian CVE	CVE-2026-43076	6 May 202607:40	–	debiancve
EUVD	EUVD-2026-27563	6 May 202612:30	–	euvd
NVD	CVE-2026-43076	6 May 202610:16	–	nvd
OSV	BELL-CVE-2026-43076	9 May 202606:10	–	osv
OSV	DEBIAN-CVE-2026-43076	6 May 202610:16	–	osv
OSV	ROOT-OS-DEBIAN-11-CVE-2026-43076 CVE-2026-43076 in rootio-linux - Patched by Root	12 Jun 202604:02	–	osv
OSV	ROOT-OS-DEBIAN-12-CVE-2026-43076 CVE-2026-43076 in rootio-linux - Patched by Root	12 Jun 202604:20	–	osv

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/ocfs2/inode.c"
    ],
    "versions": [
      {
        "version": "23193e513d1cd69411469f028d56fd175d4a6b07",
        "lessThan": "d012c782abcabe68b5b9e71be58a15e9f9d83dc1",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "23193e513d1cd69411469f028d56fd175d4a6b07",
        "lessThan": "bcd46bc261b215b3b12c557a978299eafa02ecdd",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "23193e513d1cd69411469f028d56fd175d4a6b07",
        "lessThan": "131c0b573e1b467b7d553e9ff38003f1acd8f5f2",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "23193e513d1cd69411469f028d56fd175d4a6b07",
        "lessThan": "37f074e65f24f10f8d8df224a572e4cb9e6faf63",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "23193e513d1cd69411469f028d56fd175d4a6b07",
        "lessThan": "c1de19e891be3bfb3e1d0c7cf07bbb8fb3b77c1b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "23193e513d1cd69411469f028d56fd175d4a6b07",
        "lessThan": "cd2d765aa7157f852999842af32148128c735d39",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "23193e513d1cd69411469f028d56fd175d4a6b07",
        "lessThan": "77d0295725109d77f5854ef5b58c0d06c08168cc",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "23193e513d1cd69411469f028d56fd175d4a6b07",
        "lessThan": "1524af3685b35feac76662cc551cbc37bd14775f",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/ocfs2/inode.c"
    ],
    "versions": [
      {
        "version": "2.6.24",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "2.6.24",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.258",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.209",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.175",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.136",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.83",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.24",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.19.14",
        "lessThanOrEqual": "6.19.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/77d0295725109d77f5854ef5b58c0d06c08168cc
git	www.git.kernel.org/stable/c/1524af3685b35feac76662cc551cbc37bd14775f
git	www.git.kernel.org/stable/c/131c0b573e1b467b7d553e9ff38003f1acd8f5f2
git	www.git.kernel.org/stable/c/c1de19e891be3bfb3e1d0c7cf07bbb8fb3b77c1b
git	www.git.kernel.org/stable/c/d012c782abcabe68b5b9e71be58a15e9f9d83dc1
git	www.git.kernel.org/stable/c/37f074e65f24f10f8d8df224a572e4cb9e6faf63
git	www.git.kernel.org/stable/c/cd2d765aa7157f852999842af32148128c735d39
git	www.git.kernel.org/stable/c/bcd46bc261b215b3b12c557a978299eafa02ecdd

01 Jun 2026 16:14Current

CVSS 3.17.8

EPSS0.00017