CVE-2026-90321

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the OCFS2 file system where inline extended attribute (xattr) metadata is not fully validated during inode block validation. Specifically, the ocfs2 validate inode block() function fails to reject invalid entry name and value bounds. This allows corrupted metadata to cause getxattr() or listxattr() to access out-of-range entry arrays or offsets, potentially leading to a use-after-free condition in the ocfs2 xattr find entry() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.