Linux Kernel Vulnerability in OCFS2 File System Affecting Multiple Users

CVE-2026-93258

What is CVE-2026-93258?

A vulnerability in the OCFS2 file system within the Linux kernel has been identified due to the improper handling of bad inodes. Specifically, the use of 'make_bad_inode()' can reset the inode type to S_IFREG, which may lead to confusion during active Virtual File System (VFS) lookups. This can result in potential vulnerabilities where the VFS_BUG_ON_INODE() function is triggered, indicating an unexpected inode type during critical operations. The reversion of the previous commit addressing inode validation failure ensures that directory inodes are correctly managed, maintaining file system integrity and security.

References