CVE-2026-53041

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the OCFS2 file system where the listxattr() function can return a size larger than the caller's buffer. This occurs when an OCFS2 inode contains both inline and block-based extended attributes (xattrs) and the inline names exactly fill the provided buffer. The ocfs2 xattr list entry() function incorrectly uses a size of zero to detect probe mode, causing it to skip bounds checks and continue counting block names even when the buffer is full.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.