CVE-2026-72159

CVE-2026-72159 concerns the Linux kernel OCFS2 filesystem: non-inline dinodes with non-zero i_size and zero i_clusters on volumes without OCFS2_FEATURE_INCOMPAT_SPARSE_ALLOC are rejected due to a malformed extent/size descriptor mismatch. The issue affects regular files and non-inline directories...

CVE-2026-72160 ocfs2: reject dinodes with non-canonical i_mode type

In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject dinodes with non-canonical imode type Patch series "ocfs2: harden inode validators against forged metadata", v2. This series adds three structural checks to OCFS2 dinode validation so malformed on-disk fields are...

CVE-2026-72160

CVE-2026-72160 affects the Linux kernel OCFS2 filesystem: it fixes validation of dinode i_mode to reject non-canonical POSIX file types. The patch series “ocfs2: harden inode validators against forged metadata” adds structural checks in ocfs2_validate_inode_block() and mirrors them in the online ...

CVE-2026-72159 ocfs2: reject non-inline dinodes with i_size and zero i_clusters

In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject non-inline dinodes with isize and zero iclusters On a volume mounted without OCFS2FEATUREINCOMPATSPARSEALLOC, a non-inline regular file with non-zero isize and zero iclusters is structurally malformed: the extent ma...

EUVD-2026-58917

In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject non-inline dinodes with isize and zero iclusters On a volume mounted without OCFS2FEATUREINCOMPATSPARSEALLOC, a non-inline regular file with non-zero isize and zero iclusters is structurally malformed: the extent ma...

EUVD-2026-58918

In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject dinodes with non-canonical imode type Patch series "ocfs2: harden inode validators against forged metadata", v2. This series adds three structural checks to OCFS2 dinode validation so malformed on-disk fields are...

CVE-2026-72159 ocfs2: reject non-inline dinodes with i_size and zero i_clusters

In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject non-inline dinodes with isize and zero iclusters On a volume mounted without OCFS2FEATUREINCOMPATSPARSEALLOC, a non-inline regular file with non-zero isize and zero iclusters is structurally malformed: the extent ma...

PT-2026-72350

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An array-index-out-of-bounds issue exists in the ocfs2 sum rightmost rec function. On-disk corruption that sets the l next free rec variable to 0 in an inode's embedded extent list can...

PT-2026-72352

In the Linux kernel, the following vulnerability has been resolved: ocfs2: avoid moving extents to occupied clusters For non-auto OCFS2 IOC MOVE EXT operations, userspace supplies a physical me goal. ocfs2 move extent initializes new phys cpos from that goal and expects ocfs2 probe alloc group to...

PT-2026-72351

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix NULL h transaction deref in ocfs2 assure trans credits BUG A direct write over unwritten extents can panic the kernel in ocfs2 assure trans credits when the journal aborts during DIO completion. The crash is a general...

PT-2026-72785

In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject FITRIM ranges shorter than a cluster ocfs2 trim mainbm trims the global bitmap in cluster units, but its too-short range validation only checks sb-s blocksize. On filesystems with a cluster size larger than the bloc...

PT-2026-72787

In the Linux kernel, the following vulnerability has been resolved: ocfs2: rebase copied fsdlm LVB pointers in locking state The locking state debugfs iterator snapshots struct ocfs2 lock res by value under ocfs2 dlm tracking lock and later formats that copy in ocfs2 dlm seq show. That is fine fo...

PT-2026-72784

In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: require a ref for locking state debugfs open debug lockres open copies inode-i private into struct debug lockres and debug lockres release later drops that pointer with dlm put. That only works if open successfully pin...

Linux Distros Unpatched Vulnerability : CVE-2026-74350

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: validate fast symlink target during inode read ocfs2validateinodeblock already rejects several inconsistent self-contained dinodes before they are expose...

PT-2026-72347

In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject non-inline dinodes with i size and zero i clusters On a volume mounted without OCFS2 FEATURE INCOMPAT SPARSE ALLOC, a non-inline regular file with non-zero i size and zero i clusters is structurally malformed: the...

Linux Distros Unpatched Vulnerability : CVE-2026-72162

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: fix UBSAN array-index-out-of-bounds in ocfs2sumrightmostrec BUG On-disk corruption setting lnextfreerec to 0 in an inode's embedded extent list triggers ...

PT-2026-72348

In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject dinodes with non-canonical i mode type Patch series "ocfs2: harden inode validators against forged metadata", v2. This series adds three structural checks to OCFS2 dinode validation so malformed on-disk fields are...

PT-2026-72349

In the Linux kernel, the following vulnerability has been resolved: ocfs2: add journal NULL check in ocfs2 checkpoint inode During unmount, ocfs2 journal shutdown frees the journal and sets osb-journal to NULL. Later, when VFS evicts remaining cached inodes, ocfs2 evict inode - ocfs2 clear inode ...

PT-2026-72786

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate fast symlink target during inode read ocfs2 validate inode block already rejects several inconsistent self-contained dinodes before they are exposed to the rest of the filesystem. Fast symlinks need the same...

K000162889: Linux kernel vulnerability CVE-2026-63796

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject oversized group bitmap descriptors ocfs2validategdparent only bounds bgbits against the parent allocator's chain geometry. A malicious descriptor can still claim a bgsize/bgbits pair th...