CVE-2026-89492

Linux kernel ocfs2 filesystem contains a slab out-of-bounds read in the indexed-directory validation path. The functions ocfs2_validate_dx_leaf() and ocfs2_validate_dx_root() check ECC and signatures but fail to bound de_num_used and de_count against the 4 KB block capacity. A crafted on-disk ima...