CVE-2026-89492

A flaw was found in the Linux kernel's OCFS2 filesystem. A local attacker with the ability to mount a crafted on-disk image could exploit this vulnerability by providing excessive directory-index entry counts when reading metadata. This can lead to an out-of-bounds read, potentially causing...

CVE-2026-89492

Linux kernel ocfs2 filesystem contains a slab out-of-bounds read in the indexed-directory validation path. The functions ocfs2_validate_dx_leaf() and ocfs2_validate_dx_root() check ECC and signatures but fail to bound de_num_used and de_count against the 4 KB block capacity. A crafted on-disk ima...

PT-2026-90208

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate directory-index entry counts when reading metadata ocfs2 validate dx leaf and ocfs2 validate dx root check the ECC and signature of an indexed-directory block before it reaches higher-level callers, but neither...