CVE-2026-72162

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An array-index-out-of-bounds issue exists in the ocfs2 sum rightmost rec() function. On-disk corruption that sets the l next free rec variable to 0 in an inode's embedded extent list can trigger a UBSAN panic during the next write operation to that file. The issue occurs because the function calculates an index i based on l next free rec and accesses the l recs[] array without proper validation. If l next free rec is 0, the index becomes -1; if it exceeds l count, the index falls outside the array boundaries, violating the counted by le(l count) annotation and triggering UBSAN (Undefined Behavior Sanitizer), a tool used to detect undefined behavior in C/C++ programs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.