CVE-2026-89492
A flaw in the Linux kernel’s OCFS2 filesystem lets an attacker craft a corrupted directory metadata block that causes the kernel to read beyond the block’s limits, potentially exposing sensitive data. The issue occurs because the kernel does not bound the directory entry list counts when validating indexed directories. A patch has been applied to enforce proper bounds checking.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Linux kernel systems that use the OCFS2 filesystem, especially those mounting OCFS2 volumes that could contain corrupted metadata.
Real-world impact
An attacker could read arbitrary kernel memory by mounting a malicious OCFS2 image and performing normal file operations such as stat() or open() on an indexed directory, potentially leaking confidential information or causing a crash.
Why this severity
The CVSS score of 9.8 reflects a critical vulnerability: it is network‑reachable, requires no authentication or user interaction, and can compromise confidentiality, integrity, and availability by enabling out‑of‑bounds reads in kernel space.
What to do about it
- 01Upgrade the Linux kernel to a version that includes commit 775c17386a6f or later, which adds bounds checking for OCFS2 directory entries.
NVD description
Timeline
- Sep 11, 2026 · 2d agoPublishedDisclosed and added to the National Vulnerability Database.
- Sep 13, 2026 · 8h agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.