CVE-2026-89492

A flaw was found in the Linux kernel's OCFS2 filesystem. A local attacker with the ability to mount a crafted on-disk image could exploit this vulnerability by providing excessive directory-index entry counts when reading metadata. This can lead to an out-of-bounds read, potentially causing...

CVE-2026-89492

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate directory-index entry counts when reading metadata ocfs2validatedxleaf and ocfs2validatedxroot check the ECC and signature of an indexed-directory block before it reaches higher-level callers, but neither validato...

CVE-2026-89492

CVE-2026-89492 is a slab out-of-bounds read in the Linux kernel's OCFS2 filesystem. The functions ocfs2_validate_dx_leaf() and ocfs2_validate_dx_root() fail to bound the ocfs2_dx_entry_list counts against the 4 KB block capacity. As a result, ocfs2_dx_dir_search() can walk up to 0xffff entries pa...

PT-2026-90208

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read issue exists in the ocfs2 module of the Linux kernel. The functions ocfs2 validate dx leaf and ocfs2 validate dx root fail to bound the ocfs2 dx entry list counts...