CVE-2026-63796

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ocfs2 component where the ocfs2 validate gd parent() function only validates bg bits against the parent allocator's chain geometry. A malicious descriptor can specify a bg size/bg bits pair that exceeds the physical bitmap bytes available in the group descriptor block. This can lead to bitmap scans and bit updates running past the bg bitmap boundary, resulting in a KASAN use-after-free in the find next bit() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.