Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-80881

ocfs2: fix buffer head management in ocfs2_read_blocks()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix buffer head management in ocfs2_read_blocks() In ocfs2_read_blocks(), caller should't assume that buffer head returned by 'sb_getblk()' is exclusively owned and so 'put_bh()' always drops b_count from 1 to 0. If it is not so, buffer head remains on hold and likely to be returned by the next call to 'sb_getblk()' unchanged - that is, with BH_Uptodate bit set even if it has failed validation previously, thus allowing to insert that buffer head into OCFS2 metadata cache and submit it to upper layers. To avoid such a scenario, BH_Uptodate should be cleared immediately after 'validate()' callback has detected some data inconsistency.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • cf76c78595ca87548ca5e45c862ac9e0949c4687 to < a4eae1499c760949a93459d11390bd1fd823d31daffected
  • cf76c78595ca87548ca5e45c862ac9e0949c4687 to < 4ab17e328522a4df5fe0f0dcf39098118b1feeaaaffected
  • cf76c78595ca87548ca5e45c862ac9e0949c4687 to < 5927acb3e2c99985a14adecd9d1b67ba191c622daffected
  • cf76c78595ca87548ca5e45c862ac9e0949c4687 to < ecb3f9386f4353034caef77239473c627232db17affected
  • cf76c78595ca87548ca5e45c862ac9e0949c4687 to < 61f7a5acb3bf8fc97dad78f54b1e8d0e1c819766affected
  • cf76c78595ca87548ca5e45c862ac9e0949c4687 to < 0e389fc290c350c67591abf4c367119f4689f310affected
  • cf76c78595ca87548ca5e45c862ac9e0949c4687 to < 9e7a057934cdd58e4cc94350bcfe5367bbee0f8eaffected
  • cf76c78595ca87548ca5e45c862ac9e0949c4687 to < 6371a07148ee979af22a9d6f4c277462953a9a4aaffected
  • 01f93d5e36753fc4d06ec67f05ce78c9c6f2dd56affected
  • 65cbd1279f4b999d56a838344a30642db24cd215affected
  • 97e1db17bc1ef4c2e1789bc9323c7be44fba53f8affected
  • 6c150df9c2e80b5cf86f5a0d98beb7390ad63bfcaffected
  • 4.4.204 to < 4.5affected
  • 4.9.204 to < 4.10affected
  • 4.14.157 to < 4.15affected
  • 4.19.87 to < 4.20affected

Linux Linux

Default version status: affected

  • 4.20affected
  • 0 to < 4.20unaffected
  • 5.10.261 to ≤ 5.10.*unaffected
  • 5.15.212 to ≤ 5.15.*unaffected
  • 6.1.178 to ≤ 6.1.*unaffected
  • 6.6.145 to ≤ 6.6.*unaffected
  • 6.12.97 to ≤ 6.12.*unaffected
  • 6.18.40 to ≤ 6.18.*unaffected
  • 7.1.5 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References