CVE-2026-53040 ocfs2: validate bg_bits during freefrag scan

🗓️ 24 Jun 2026 16:29:46Reported by LinuxType

OCFS2 fix validates bg_bits during freefrag scan to prevent out-of-bounds bitmap walk when NON_COHERENT IOCTL.

Reporter	Title	Published	Views	Family All 9
CVE	CVE-2026-53040	24 Jun 202616:29	–	cve
Debian CVE	CVE-2026-53040	24 Jun 202616:29	–	debiancve
EUVD	EUVD-2026-38908	24 Jun 202618:32	–	euvd
NVD	CVE-2026-53040	24 Jun 202617:17	–	nvd
OSV	DEBIAN-CVE-2026-53040	24 Jun 202617:17	–	osv
OSV	ECHO-5DE5-9C6B-6A4C	25 Jun 202609:55	–	osv
OSV	UBUNTU-CVE-2026-53040	24 Jun 202617:17	–	osv
Positive Technologies	PT-2026-51934	24 Jun 202600:00	–	ptsecurity
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-53040	25 Jun 202600:00	–	nessus

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/ocfs2/ioctl.c"
    ],
    "versions": [
      {
        "version": "d24a10b9f8ed548981696cd36e2b4f16e6f360b1",
        "lessThan": "bb2906a1065ec28de021bac2ed03f2624edd7d07",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "d24a10b9f8ed548981696cd36e2b4f16e6f360b1",
        "lessThan": "3e167e230d19cd273108bab2e4c61800fc335ae8",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "d24a10b9f8ed548981696cd36e2b4f16e6f360b1",
        "lessThan": "0998674eec138c55e9e349b9cbd9dbc5129a9cc8",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "d24a10b9f8ed548981696cd36e2b4f16e6f360b1",
        "lessThan": "bb3c54d1e71578521111f1a1ee7d5f4761a242b8",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "d24a10b9f8ed548981696cd36e2b4f16e6f360b1",
        "lessThan": "05d0cbea41167b6b061c6ba5b70ee5a9a7a24c9e",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "d24a10b9f8ed548981696cd36e2b4f16e6f360b1",
        "lessThan": "4c2d62ddde8928db12f4608950b67a20e67deab2",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "d24a10b9f8ed548981696cd36e2b4f16e6f360b1",
        "lessThan": "e0dcf12665d6dde37facf790803cdad44d5c328c",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "d24a10b9f8ed548981696cd36e2b4f16e6f360b1",
        "lessThan": "8f687eeed3da3012152b0f9473f578869de0cd7b",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/ocfs2/ioctl.c"
    ],
    "versions": [
      {
        "version": "3.0",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "3.0",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.258",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.209",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.175",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.141",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.91",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.33",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0.10",
        "lessThanOrEqual": "7.0.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/3e167e230d19cd273108bab2e4c61800fc335ae8
git	www.git.kernel.org/stable/c/05d0cbea41167b6b061c6ba5b70ee5a9a7a24c9e
git	www.git.kernel.org/stable/c/e0dcf12665d6dde37facf790803cdad44d5c328c
git	www.git.kernel.org/stable/c/0998674eec138c55e9e349b9cbd9dbc5129a9cc8
git	www.git.kernel.org/stable/c/4c2d62ddde8928db12f4608950b67a20e67deab2
git	www.git.kernel.org/stable/c/bb3c54d1e71578521111f1a1ee7d5f4761a242b8
git	www.git.kernel.org/stable/c/8f687eeed3da3012152b0f9473f578869de0cd7b
git	www.git.kernel.org/stable/c/bb2906a1065ec28de021bac2ed03f2624edd7d07

24 Jun 2026 16:29Current

EPSS0.00176