CVE-2026-74351

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A slab-use-after-free issue exists in the ocfs2 module. The locking state debugfs iterator snapshots the ocfs2 lock res structure by value under the ocfs2 dlm tracking lock and subsequently formats this copy in the ocfs2 dlm seq show() function. While inline fields are handled correctly, the userspace fsdlm stack stores the Local Variable Block (LVB) via the sb lvbptr variable. After the iterator releases the tracking lock, a non-NULL sb lvbptr may still point to the original lockres owner. If a teardown process frees that container before the debugfs dump accesses the raw LVB bytes, a use-after-free occurs. This was identified through a KASAN report in the ocfs2 dlm seq show() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.