CVE-2026-43076

kernel: ocfs2: validate inline data i_size during inode read

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 6, 2026

Updated · October 20, 2026

Description

A flaw was found in the ocfs2 filesystem module of the Linux kernel. This vulnerability occurs when the system attempts to read an inode from a corrupted filesystem, where the inline data size is not properly validated. This can lead to a use-after-free condition, potentially allowing a local attacker to cause a system crash (Denial of Service) or, in some cases, execute arbitrary code.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-1284 · Improper Validation of Specified Quantity in Input