CVE-2026-53039

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ocfs2 module where the OCFS2 IOC GROUP ADD ioctl can trigger a kernel BUG ON. This occurs because the ocfs2 group add() function calls ocfs2 set new buffer uptodate() on a user-controlled group block before the block number is validated by ocfs2 verify group and input(). The ocfs2 set new buffer uptodate() function is intended only for newly allocated metadata and requires that the block is not already present in the metadata cache. Additionally, the code incorrectly uses INODE CACHE(inode) instead of the main bm inode cache context for the group descriptor.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.