CVE-2026-53040
kernel: ocfs2: validate bg_bits during freefrag scan
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · June 24, 2026
Updated · October 20, 2026
Description
A flaw was found in the Oracle Cluster File System Release 2 (OCFS2) in the Linux kernel. A local attacker with the ability to craft a malicious OCFS2 filesystem could trigger a use-after-free vulnerability. This occurs when the OCFS2_IOC_INFO ioctl is issued with the OCFS2_INFO_FL_NON_COHERENT flag, leading to an out-of-bounds bitmap walk. This flaw could result in a denial of service, causing system instability or crashes.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-1285 · Improper Validation of Specified Index, Position, or Offset in Input