CVE-2026-90205

CVE-2026-90205 affects the Linux kernel OCFS2 filesystem . During inode read, ocfs2_validate_inode_block() validates i_suballoc_slot but leaves the active ordinary orphan slot (i_orphaned_slot) unchecked. A corrupted dinode with OCFS2_ORPHANED_FL can therefore carry a slot value outside the mount...

CVE-2026-90204 ocfs2: validate DIO orphan slot during inode read

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate DIO orphan slot during inode read BUG A corrupted append-DIO dinode high byte at offset 0xa1 corrupted from 0 to 1 can carry an idioorphanedslot outside the mounted filesystem slot range and trigger a use-after-fr...

CVE-2026-90204 ocfs2: validate DIO orphan slot during inode read

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate DIO orphan slot during inode read BUG A corrupted append-DIO dinode high byte at offset 0xa1 corrupted from 0 to 1 can carry an idioorphanedslot outside the mounted filesystem slot range and trigger a use-after-fr...

CVE-2026-90204

A use-after-free vulnerability in the Linux kernel OCFS2 filesystem is triggered when a corrupted append-DIO dinode (high byte at offset 0xa1 corrupted from 0 to 1) carries an i_dio_orphaned_slot value outside the mounted filesystem's slot range. The dinode validator fails to check this active sl...

PT-2026-94669

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the OCFS2 file system where inline extended attribute xattr metadata is not fully validated during inode block validation. Specifically, the ocfs2 validate inode block...

PT-2026-94553

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The OCFS2 file system fails to validate active ordinary and append-DIO orphan slots read from dinodes. A corrupted dinode with the OCFS2 ORPHANED FL flag can contain an i orphaned slot...

PT-2026-94670

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the OCFS2 cluster component where the o2nm node local store function fails to clear the cl has local variable when handling local=0. This creates a stale state that...

PT-2026-94552

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free error exists in the ocfs2 module of the Linux kernel. The issue occurs when a corrupted append-DIO dinode contains an i dio orphaned slot value that falls outside the...

PT-2026-94668

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ocfs2 module where the ocfs2 validate xattr block function fails to verify that xh count and entry offsets for non-indexed blocks fit within the block. Additionall...

CVE-2026-90321: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate inline xattrs during inode block validation Patch series "ocfs2: validate xattr entry bounds", v7. This series validates OCFS2 xattr entry name/value bounds when xattr metadata is read and validated, before getxat...

CVE-2026-90320: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate external xattr entries when reading metadata ocfs2validatexattrblock checks the xattr block header before the block reaches higher-level xattr users, but it does not verify that a non-indexed block's xhcount and...

CVE-2026-90301: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ocfs2: o2hb: quiesce negotiate handlers and timeout work Heartbeat regions publish struct o2hbregion as the private data for the NEGOTIMEOUT and NEGOAPPROVE o2net handlers as soon as makeitem creates the configfs region. The...

CVE-2026-90205: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate orphan slot during inode read Patch series "ocfs2: validate active orphan slots during inode read". OCFS2 trusts active ordinary and append-DIO orphan slots read from dinodes. A corrupted slot can therefore index...

CVE-2026-90204: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate DIO orphan slot during inode read BUG A corrupted append-DIO dinode high byte at offset 0xa1 corrupted from 0 to 1 can carry an idioorphanedslot outside the mounted filesystem slot range and trigger a use-after-fr...

PT-2026-94649

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the OCFS2 heartbeat o2hb component of the Linux kernel. The problem occurs because heartbeat regions publish the o2hb region structure as private da...

CVE-2026-90322: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ocfs2/cluster: keep heartbeat local node stable o2nmnodelocalstore handles local=0 by stopping o2net and setting cllocalnode to O2NMINVALIDNODENUM, but it leaves clhaslocal set. That stale state makes o2nmthisnode return 255,...

PT-2026-94650

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the OCFS2 heartbeat and o2net teardown process. When a local-node teardown occurs via o2net stop listening, heartbeat callbacks may remain registered. If a...

CVE-2026-90302: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ocfs2: synchronize heartbeat callbacks with o2net teardown Patch series "ocfs2: harden heartbeat teardown races". This series fixes two OCFS2 heartbeat/o2net teardown races found by KASAN. This patch of 2: Heartbeat callbacks sta...

SUSE CVE-2026-89491

In the Linux kernel, the following vulnerability has been resolved: ocfs2: cluster: don't sleep while holding o2hblivelock in o2hbregionpin Patch series "ocfs2: cluster: o2hbregionpin fixes", v2. This series fixes three related issues in o2hbregionpin, all are from the original implementation in...

SUSE CVE-2026-89493

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate rlused against rlcount in refcount block validator ocfs2findrefcountrecinrl walks the on-disk refcount record array with: for ; i rfrecords.rlused; i++ rec = &rb-rfrecords.rlrecsi; ... rlrecs lives in a single...