CVE-2026-72159: ocfs2: reject non-inline dinodes with i_size and zero i_clusters
In the Linux kernel, the following vulnerability has been resolved:
ocfs2: reject non-inline dinodes with isize and zero iclusters
On a volume mounted without OCFS2FEATUREINCOMPATSPARSEALLOC, a non-inline regular file with non-zero isize and zero iclusters is structurally malformed: the extent map declares no allocated clusters yet the size header claims content exists. Keep rejecting that shape, but express it through a shared predicate so the same invariant is available to normal inode reads and online filecheck.
The same zero-cluster shape is also malformed for non-inline directories. ocfs2 directory growth allocates backing storage before advancing isize, and ocfs2dirforeachblkel() later walks until ctx->pos reaches isizeread(inode). A forged directory dinode with a huge isize and no clusters would repeatedly fail on holes while advancing through the claimed size.
Sparse regular files remain exempt: on sparse-alloc volumes, truncate can legitimately grow isize without allocating clusters. System inodes and inline-data dinodes also retain their separate storage rules.
Mirror the check in ocfs2filecheckvalidateinodeblock() as well. filecheck reports through its own error namespace, so malformed size/cluster state is logged as a filecheck invalid-inode result rather than via ocfs2error(), but it must not proceed into ocfs2populateinode().
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
If the OCFS2 volume is mounted without OCFS2_FEATURE_INCOMPAT_SPARSE_ALLOC, ensure that truncated/sparse regular files are handled appropriately: sparse regular files remain exempt on such mounts, while on sparse-alloc volumes truncate behavior must not allow malformed directory/dinode shapes to advance i_size/position tracking.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72159?
The CVE-2026-72159 vulnerability has a risk rating of 34.
How do I fix CVE-2026-72159?
To fix CVE-2026-72159, ensure that your system is updated to a Linux kernel version that includes the resolution for this vulnerability.
What systems are affected by CVE-2026-72159?
CVE-2026-72159 affects Linux systems using the OCFS2 filesystem that have non-inline regular files with non-zero i_size and zero i_clusters.
What is the impact of CVE-2026-72159 on affected systems?
The impact of CVE-2026-72159 includes the potential for structural malformation of files, which may lead to data corruption.
When was CVE-2026-72159 published?
CVE-2026-72159 was published on August 15, 2026.