CVE-2026-72159

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ocfs2 file system where non-inline dinodes with a non-zero i size and zero i clusters are considered structurally malformed on volumes mounted without OCFS2 FEATURE INCOMPAT SPARSE ALLOC. This condition affects both regular files and directories. For directories, a forged dinode with a large i size and no clusters could cause the ocfs2 dir foreach blk el() function to repeatedly fail on holes while attempting to advance through the claimed size. The issue is addressed by implementing a shared predicate to reject these malformed shapes during normal inode reads and online filechecks, specifically ensuring that ocfs2 filecheck validate inode block() prevents the process from proceeding into ocfs2 populate inode().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.