A vulnerability in the Linux kernel OCFS2 file system allows an attacker to trigger out-of-bounds memory access via corrupted inode metadata, posing a risk of system instability or unauthorized code execution.

The flaw exists in the OCFS2 file system driver where it inadequately validates active orphan slots read from dinodes. This allows a corrupted orphan slot to index internal system structures outside of their allocated memory, leading to a slab-use-after-free condition.

The vulnerability carries a CVSS score of 7.8, indicating a high severity risk. Successful exploitation could lead to kernel-level memory corruption, resulting in a denial of service through system crashes, or potentially providing an attacker with a vector to execute arbitrary code with elevated privileges. Given the core nature of the Linux kernel, this impacts the integrity and availability of any environment utilizing the OCFS2 file system.

Immediate Action: Update your Linux kernel to version 6.18.52, 7.2.6, or a later stable release to incorporate the necessary validation checks for orphan slots.

Proactive Monitoring: Monitor system logs for kernel panic events or KASAN error reports, which may indicate attempted exploitation of memory-related vulnerabilities.

Compensating Controls: Restrict access to file system operations and ensure that only trusted users have the ability to mount or interact with OCFS2 volumes.

Public Exploit Available: No — there is no confirmation of a public exploit in the available data.

This is a high-severity flaw within the Linux kernel that requires immediate attention for any systems running the OCFS2 file system. Organizations should prioritize patching their kernels to the specified fixed versions to eliminate the risk of memory corruption and potential system-wide compromise. Failure to update may leave critical infrastructure vulnerable to local exploitation if an adversary can introduce corrupted file system structures.