SB20260912285 - Out-of-bounds read in Linux kernel ocfs2

Description

This security bulletin contains information about 1 vulnerability.

1) Out-of-bounds read (CVE-ID: CVE-2026-89492)

CWE-ID: CWE-125 - Out-of-bounds read

CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local user to read memory beyond the bounds of a directory-index metadata block.

The vulnerability exists due to an out-of-bounds read in the OCFS2 directory index entry-list validation when processing a crafted on-disk image. A local user can supply a crafted image and access an indexed directory to read beyond the entry array.

Exploitation is reachable through path lookup, stat(), or open() operations after the image is mounted.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/b8a5c0c32df2c5b685ceef76ac77e37c7e1dc3ed
• https://git.kernel.org/stable/c/bc70726ddad53c7e9a9a85915bf2415b0d4f42f9
• https://git.kernel.org/stable/c/fcfcba8fe17dbf2c8805690b8cc25e32d81249a4