CVE-2026-72164

A flaw was found in the ocfs2 component of the Linux kernel. A local user can exploit a vulnerability in the ocfs2_move_extent function when performing OCFS2_IOC_MOVE_EXT operations. This issue allows file data to be copied into a disk cluster that is already occupied by another file, leading to data corruption.

Red Hat rates this vulnerability as Moderate because exploitation requires local access and is limited to systems actively mounting an OCFS2 cluster filesystem, resulting in local data corruption without granting immediate privilege escalation. Furthermore, Red Hat Enterprise Linux is not affected by this flaw, as OCFS2 is unsupported and the corresponding code is not included in shipped kernels.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.