CVE-2026-89496

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

ocfs2: always run deallocs on copy-on-write completion

Local fuzzing of 6.12.94 has found the following memory leak

caused by doing 'copy_file_range()' within the same filesystem:

unreferenced object 0xffff88812192c980 (size 32):

comm "syz.0.49", pid 12095, jiffies 4294964143

hex dump (first 32 bytes):

00 00 00 00 00 00 00 00 08 00 00 00 00 00 00 00 ................

c0 c5 92 21 81 88 ff ff 00 02 00 00 00 06 00 00 ...!............

backtrace (crc 7068d63f):

kmemleak_alloc_recursive include/linux/kmemleak.h:42 [inline]

slab_post_alloc_hook mm/slub.c:4152 [inline]

slab_alloc_node mm/slub.c:4197 [inline]

__kmalloc_cache_noprof+0x168/0x2c0 mm/slub.c:4358

kmalloc_noprof include/linux/slab.h:878 [inline]

ocfs2_find_per_slot_free_list fs/ocfs2/alloc.c:6618 [inline]

ocfs2_cache_block_dealloc+0x155/0x4b0 fs/ocfs2/alloc.c:6786

ocfs2_cache_extent_block_free fs/ocfs2/alloc.c:6819 [i

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References