CVE-2026-89493

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ocfs2 component of the Linux kernel where the ocfs2 validate refcount block() function fails to validate the rl used and rl count variables against the actual on-disk capacity of the refcount block. A local attacker with CAP SYS ADMIN privileges can exploit this by mounting a crafted or corrupted ocfs2 image or performing a raw write to the block device of a mounted filesystem. This can lead to an out-of-bounds read in the ocfs2 find refcount rec in rl() function and a subsequent out-of-bounds memmove() operation in the ocfs2 insert refcount rec() function, potentially allowing an out-of-bounds write of up to approximately 1 MiB of data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.