CVE-2026-89490

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ocfs2 file system where the directory cookie position is incorrectly rebuilt in the ocfs2 dir foreach blk el() function on 32-bit kernels. This occurs because the mask ~(sb->s blocksize - 1) is computed as a 32-bit unsigned value, which is then zero-extended to 64 bits when combined with the 64-bit ctx->pos variable. Consequently, the high 32 bits of ctx->pos are cleared. When the readdir() function crosses a 4 GiB boundary, the position resets to the first 4 GiB block, causing the system to indefinitely re-enumerate directory entries that have already been returned. This affects all non-inline directories large enough to exceed 4 GiB. 64-bit kernels are not affected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.