CVE-2026-53041

kernel: ocfs2: fix listxattr handling when the buffer is full

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · June 24, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's Oracle Cluster File System version 2 (OCFS2). When an OCFS2 inode has both inline and and block-based extended attributes (xattrs), the listxattr() function can return a size larger than the caller's buffer. This incorrect size handling can lead to a kernel bug and a system crash, resulting in a Denial of Service (DoS).

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-787 · Out-of-bounds Write