Answer in brief
CVE-2026-90320 records a High severity (CVSS 7.8) vulnerability in ocfs2: validate external xattr entries when reading metadata. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 7.8. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=cf1d6c763fbcb115263114302485ad17e7933d87 <9f4129b6905b7d638bbc9eb8013c3989cbe30b7e || >=cf1d6c763fbcb115263114302485ad17e7933d87 <2cf82b46d5e43be0dfbaac7fa1073cec2fc1f5e6 | 9f4129b6905b7d638bbc9eb8013c3989cbe30b7e, 2cf82b46d5e43be0dfbaac7fa1073cec2fc1f5e6 |
| Linux/Linuxgeneric | 2.6.28 | Not reported |
| Linux/Linuxgeneric | >=cf1d6c763fbcb115263114302485ad17e7933d87 <dc5778dbd0b6c411107a0e37e913a94b3c2f2728 || >=cf1d6c763fbcb115263114302485ad17e7933d87 <ee4ef26927e967ea699b3f0d7ecf97ce044fbc79 || >=cf1d6c763fbcb115263114302485ad17e7933d87 <9f4129b6905b7d638bbc9eb8013c3989cbe30b7e || >=cf1d6c763fbcb115263114302485ad17e7933d87 <2cf82b46d5e43be0dfbaac7fa1073cec2fc1f5e6 | dc5778dbd0b6c411107a0e37e913a94b3c2f2728, ee4ef26927e967ea699b3f0d7ecf97ce044fbc79, 9f4129b6905b7d638bbc9eb8013c3989cbe30b7e, 2cf82b46d5e43be0dfbaac7fa1073cec2fc1f5e6 |
Published upstream
Sep 17, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 21, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Sep 17, 2026
In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate external xattr entries when reading metadata ocfs2_validate_xattr_block() checks the xattr block header before the block reaches higher-level xattr users, but it does not verify that a non-indexed block's xh_count and entry offsets fit inside the block. Indexed buckets likewise reach list/get consumers after ECC without an entry-bounds check. Use the flat xattr entry validator for non-indexed external xattr blocks, and use a bucket-specific validator for indexed buckets at metadata read time. The bucket validator keeps the entry array bounded by the first bucket block while checking name/value offsets against the bucket block they target. Reject corrupted external xattr metadata before listxattr() or getxattr() can walk out-of-range entry arrays or name/value offsets. Validation reproduced this kernel report: BUG: KASAN: use-after-free in ocfs2_xattr_list_entries+0xd7/0x190 Read of size 1 at addr ffff88810a654007 by task ocfs2_xattr_lis/630 Call Trace: dump_stack_lvl+0x66/0xa0 print_report+0xce/0x630 kasan_report+0xe0/0x110 ocfs2_xattr_list_entries+0xd7/0x190 ocfs2_listxattr+0x3f6/0x610 listxattr+0x90/0xe0 path_listxattrat+0xed/0x220 do_syscall_64+0x115/0x6a0 entry_SYSCALL_64_after_hwframe+0x77/0x7f
Quoted source text, attributed separately from HOL analysis.