CVE-2026-90321

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

ocfs2: validate inline xattrs during inode block validation

Patch series "ocfs2: validate xattr entry bounds", v7.

This series validates OCFS2 xattr entry name/value bounds when xattr

metadata is read and validated, before getxattr() or listxattr() can walk

out-of-range entry arrays or offsets from corrupted metadata.

This patch (of 2):

ocfs2_validate_inode_block() verifies a dinode before OCFS2 users walk

metadata from it, but inline xattr metadata is still checked only in

operation-specific consumers. The existing ibody lookup helper validates

inline header placement and entry count, but inode block validation does

not reject entry name/value bounds.

Add a flat xattr entry validator and call it from inode block validation

for inline xattrs. Keep the operation paths on their existing

header/count lookup checks; the full entry bounds check now runs when the

inode block is validated at read time.

Reject corrup

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References