PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-90205 Linux CVE debrief

A vulnerability in the Linux kernel's OCFS2 filesystem has been addressed. The vulnerability occurs when validating orphan slots during inode read operations. A corrupted dinode with OCFS2_ORPHANED_FL can carry an i_orphaned_slot outside the mounted filesystem slot range. This can lead to an out-of-bounds memory access when ocfs2_wipe_inode() uses it to index osb_orphan_wipes before looking up the orphan directory.

Vendor
Linux
Product
Unknown
CVSS
HIGH 7.8
CISA KEV
Not listed in stored evidence
Original CVE published
2026-09-17
Original CVE updated
2026-09-18
Advisory published
2026-09-17
Advisory updated
2026-09-18

Who should care

Linux kernel maintainers, Linux distribution maintainers, and users of the OCFS2 filesystem should review and apply the patches provided by the Linux kernel maintainers to prevent potential issues. This includes verifying Linux kernel and OCFS2 filesystem configurations, monitoring for potential issues, and implementing compensating controls for exposed systems.

Why it matters

The vulnerability in the Linux kernel's OCFS2 filesystem can lead to potential security issues, including denial of service and elevation of privileges. Linux kernel maintainers, Linux distribution maintainers, and users of the OCFS2 filesystem should review and apply the patches provided by the Linux kernel maintainers to prevent potential issues.

  • Potential out-of-bounds memory access and denial of service.
  • Possible elevation of privileges.
  • Required verification of Linux kernel and OCFS2 filesystem configurations.

Technical summary

The Linux kernel's OCFS2 filesystem has a vulnerability that can lead to an out-of-bounds memory access. The vulnerability occurs when validating orphan slots during inode read operations. A corrupted dinode with OCFS2_ORPHANED_FL can carry an i_orphaned_slot outside the mounted filesystem slot range. This can cause potential security issues, including denial of service and elevation of privileges. Linux kernel maintainers, Linux distribution maintainers, and users of the OCFS2 filesystem should review and apply the patches provided by the Linux kernel maintainers to prevent potential issues.

Defensive priority

High

Recommended defensive actions

  • Review and apply the patches provided by the Linux kernel maintainers.
  • Ensure that the Linux kernel is updated to a version that includes the fix.
  • Monitor the Linux kernel's OCFS2 filesystem for any potential issues.
  • Perform a thorough review of the Linux kernel and OCFS2 filesystem configurations to identify potential vulnerabilities.
  • Verify that the Linux kernel and OCFS2 filesystem are properly configured and secured.
  • Implement compensating controls for exposed systems while remediation is scheduled and verified.
  • Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The CVE record and NVD vulnerability detail provide information on the vulnerability. The Linux kernel's OCFS2 filesystem has a vulnerability that can lead to an out-of-bounds memory access. The vulnerability has been addressed with a patch series 'ocfs2: validate active orphan slots during inode read'.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-90205 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-90205

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-90205 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-90205

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/3d7c4b7ce7b4baedfd8699fa692cd95f77d332de

    416baaa9-dc9f-4396-8d5f-8c081fb06d67

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/b2d31acbd3b182755b019183fb46949ba5e39b9f

    416baaa9-dc9f-4396-8d5f-8c081fb06d67

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/c6c908f9b4edfb04534b15573168ae038f7a9cbf

    416baaa9-dc9f-4396-8d5f-8c081fb06d67

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.