CVE-2026-74349

A flaw was found in the Linux kernel's OCFS2 (Oracle Cluster File System version 2) component. A local attacker with appropriate permissions could trigger an issue during filesystem trimming operations. By providing a specific range for trimming that is smaller than expected, an internal calculation error (integer underflow) occurs. This error could cause the system to trim data outside the intended area, potentially leading to data corruption or making the system unavailable (Denial of Service).

This vulnerability is evaluated as having Moderate severity because exploitation requires local access and privileges to execute block discard operations, restricting the potential blast radius. In Red Hat Enterprise Linux, the OCFS2 file system is not enabled or distributed in supported kernels. Consequently, default enterprise environments do not package the affected code and are not impacted.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.