CVE-2026-74350

A flaw was found in ocfs2, the Oracle Cluster File System version 2. A local attacker could create a specially crafted fast symbolic link (symlink) with an incorrect inode size or a missing null character terminator. When the kernel attempts to read this malformed symlink, it can read beyond the allocated buffer, leading to a use-after-free vulnerability. This memory corruption could allow a local attacker to cause a denial of service or potentially achieve arbitrary code execution.

This vulnerability is rated as Moderate impact because successful exploitation requires local access to mount a malformed storage image, restricting the threat surface compared to remote attacks. Standard Red Hat Enterprise Linux kernel builds do not enable OCFS2 support, so default installations are not exposed to this issue. As a result, systems running supported configurations are not at risk unless an administrator manually builds and introduces the module.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.