Linux Kernel Vulnerability in OCFS2 DLM Impacting Stability
CVE-2026-99204

Currently unrated

Key Information:

Vendor

Linux

Status
Vendor
CVE Published:
28 October 2026

What is CVE-2026-99204?

A vulnerability in the OCFS2 Distributed Lock Manager (DLM) within the Linux kernel has been identified, which can lead to memory safety issues. The problem arises when recovery participant records are not adequately protected during debugfs reads. Specifically, the concurrent debugfs access can lead to the reading of freed memory due to improper locking mechanisms during the traversal of participant records. This oversight can result in unexpected behavior and potential exploitation. The fix involves enhancing the locking strategy, ensuring that participant records remain intact during the formatting process in debug_state_print(), thus safeguarding operational integrity during debug activities.

Affected Version(s)

Linux 007dce53a29ccffc000ab5373d188f73881390fd < 04d4571c00db61a9664f387752fa05cb3c08a537

Linux 007dce53a29ccffc000ab5373d188f73881390fd < 2bc426a32bfb78868c7f76d9547132837b6b5284

Linux 007dce53a29ccffc000ab5373d188f73881390fd < 4c435828932bf46f29860e4a0375bcae101b778a

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.