CVE-2026-80644

A flaw was found in ocfs2, a component of the Linux kernel. A local attacker could exploit this vulnerability by providing a specially crafted OCFS2 image. When this fuzzed image is mounted, it can corrupt the journal dinode. This corruption leads to a kernel crash, resulting in a Denial of Service (DoS) for the system.

A moderate severity flaw was found in the Linux kernel's OCFS2 file system. A local attacker with privileges sufficient to mount a file system could crash the kernel (denial of service) by mounting a specially crafted, fuzzed OCFS2 image that presents an invalid journal dinode. During mount, ocfs2_journal_toggle_dirty() hits a BUG_ON() when the journal dinode no longer validates, turning what should be a clean mount failure into a kernel panic. Upstream resolved this by replacing the BUG_ON() with a WARN_ON() and returning -EIO so that startup or shutdown fails normally instead of panicking the kernel. All Red Hat Enterprise Linux and Red Hat In-Vehicle OS kernel and kernel-rt streams are not affected by this flaw because the vulnerable code is not present in the shipped kernels: an invalid journal dinode encountered during mount results in a normal mount failure rather than a kernel crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.