What’s Vulnerable › Vulnerabilities

CVE-2026-93258: ocfs2: do not use make_bad_inode() in ocfs2_read_inode_block_full()

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-24 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: ocfs2: do not use make_bad_inode() in ocfs2_read_inode_block_full() This reverts commit 58b6fcd2ab34 ("ocfs2: mark inode bad upon validation failure during read"). Since 'make_bad_inode()' resets inode type to S_IFREG, doing this for directory inode during active VFS lookup is likely to confuse the latter, including VFS_BUG_ON_INODE() triggered in this case.

Affected products

• Linux kernel: 6.19 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0e7459abff46e28e64367057038ef8607e63f599
• https://git.kernel.org/stable/c/d48ace65322001b41bb5322442a21425ef4407d4

Get alerted when CVE-2026-93258 or the next vulnerability affects your stack