CVE-2026-90321 ocfs2: validate inline xattrs during inode block validation

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate inline xattrs during inode block validation Patch series "ocfs2: validate xattr entry bounds", v7. This series validates OCFS2 xattr entry name/value bounds when xattr metadata is read and validated, before getxat...

CVE-2026-90322 ocfs2/cluster: keep heartbeat local node stable

In the Linux kernel, the following vulnerability has been resolved: ocfs2/cluster: keep heartbeat local node stable o2nmnodelocalstore handles local=0 by stopping o2net and setting cllocalnode to O2NMINVALIDNODENUM, but it leaves clhaslocal set. That stale state makes o2nmthisnode return 255,...

CVE-2026-90322

CVE-2026-90322 affects the Linux kernel OCFS2 cluster subsystem (nodemanager and disk heartbeat). The root cause is that when the local node is reset via local=0, the cl_has_local flag is left set while cl_local_node is set to the invalid value 255. Heartbeat threads that dynamically re-read o2nm...

EUVD-2026-81983

In the Linux kernel, the following vulnerability has been resolved: ocfs2/cluster: keep heartbeat local node stable o2nmnodelocalstore handles local=0 by stopping o2net and setting cllocalnode to O2NMINVALIDNODENUM, but it leaves clhaslocal set. That stale state makes o2nmthisnode return 255,...

CVE-2026-90321 ocfs2: validate inline xattrs during inode block validation

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate inline xattrs during inode block validation Patch series "ocfs2: validate xattr entry bounds", v7. This series validates OCFS2 xattr entry name/value bounds when xattr metadata is read and validated, before getxat...

EUVD-2026-81981

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate external xattr entries when reading metadata ocfs2validatexattrblock checks the xattr block header before the block reaches higher-level xattr users, but it does not verify that a non-indexed block's xhcount and...

CVE-2026-90320

This Linux kernel vulnerability affects the ocfs2 filesystem 's handling of external extended attribute (xattr) metadata. The root cause is insufficient validation in ocfs2_validate_xattr_block(), which fails to verify that non-indexed block entry counts and offsets fit within the block, and that...

CVE-2026-90320 ocfs2: validate external xattr entries when reading metadata

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate external xattr entries when reading metadata ocfs2validatexattrblock checks the xattr block header before the block reaches higher-level xattr users, but it does not verify that a non-indexed block's xhcount and...

CVE-2026-90320 ocfs2: validate external xattr entries when reading metadata

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate external xattr entries when reading metadata ocfs2validatexattrblock checks the xattr block header before the block reaches higher-level xattr users, but it does not verify that a non-indexed block's xhcount and...

CVE-2026-90301 ocfs2: o2hb: quiesce negotiate handlers and timeout work

In the Linux kernel, the following vulnerability has been resolved: ocfs2: o2hb: quiesce negotiate handlers and timeout work Heartbeat regions publish struct o2hbregion as the private data for the NEGOTIMEOUT and NEGOAPPROVE o2net handlers as soon as makeitem creates the configfs region. The...

EUVD-2026-81894

In the Linux kernel, the following vulnerability has been resolved: ocfs2: o2hb: quiesce negotiate handlers and timeout work Heartbeat regions publish struct o2hbregion as the private data for the NEGOTIMEOUT and NEGOAPPROVE o2net handlers as soon as makeitem creates the configfs region. The...

CVE-2026-90302

CVE-2026-90302 is a use-after-free vulnerability in the Linux kernel's OCFS2 (Oracle Cluster File System 2) subsystem. The race occurs between heartbeat callbacks and o2net teardown : when configfs local-node teardown calls o2net_stop_listening(), a concurrent node-down event can still reach o2ne...

CVE-2026-90301

CVE-2026-90301 is a use-after-free in the Linux kernel's OCFS2 file system heartbeat subsystem (o2hb ). The struct o2hb_region is exposed to o2net negotiate handlers before the heartbeat runtime is fully initialized, and can be freed while in-flight callbacks or delayed timeout work still referen...

CVE-2026-90302 ocfs2: synchronize heartbeat callbacks with o2net teardown

In the Linux kernel, the following vulnerability has been resolved: ocfs2: synchronize heartbeat callbacks with o2net teardown Patch series "ocfs2: harden heartbeat teardown races". This series fixes two OCFS2 heartbeat/o2net teardown races found by KASAN. This patch of 2: Heartbeat callbacks sta...

CVE-2026-90301 ocfs2: o2hb: quiesce negotiate handlers and timeout work

In the Linux kernel, the following vulnerability has been resolved: ocfs2: o2hb: quiesce negotiate handlers and timeout work Heartbeat regions publish struct o2hbregion as the private data for the NEGOTIMEOUT and NEGOAPPROVE o2net handlers as soon as makeitem creates the configfs region. The...

CVE-2026-90302 ocfs2: synchronize heartbeat callbacks with o2net teardown

In the Linux kernel, the following vulnerability has been resolved: ocfs2: synchronize heartbeat callbacks with o2net teardown Patch series "ocfs2: harden heartbeat teardown races". This series fixes two OCFS2 heartbeat/o2net teardown races found by KASAN. This patch of 2: Heartbeat callbacks sta...

EUVD-2026-81963

In the Linux kernel, the following vulnerability has been resolved: ocfs2: synchronize heartbeat callbacks with o2net teardown Patch series "ocfs2: harden heartbeat teardown races". This series fixes two OCFS2 heartbeat/o2net teardown races found by KASAN. This patch of 2: Heartbeat callbacks sta...

CVE-2026-90205 ocfs2: validate orphan slot during inode read

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate orphan slot during inode read Patch series "ocfs2: validate active orphan slots during inode read". OCFS2 trusts active ordinary and append-DIO orphan slots read from dinodes. A corrupted slot can therefore index...

EUVD-2026-81798

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate orphan slot during inode read Patch series "ocfs2: validate active orphan slots during inode read". OCFS2 trusts active ordinary and append-DIO orphan slots read from dinodes. A corrupted slot can therefore index...

CVE-2026-90205

CVE-2026-90205 affects the Linux kernel OCFS2 filesystem . During inode read, ocfs2_validate_inode_block() validates i_suballoc_slot but leaves the active ordinary orphan slot (i_orphaned_slot) unchecked. A corrupted dinode with OCFS2_ORPHANED_FL can therefore carry a slot value outside the mount...