Unrated severityNVD Advisory· Published Sep 24, 2026· Updated Oct 19, 2026
CVE-2026-93258
CVE-2026-93258
Description
In the Linux kernel, the following vulnerability has been resolved:
ocfs2: do not use make_bad_inode() in ocfs2_read_inode_block_full()
This reverts commit 58b6fcd2ab34 ("ocfs2: mark inode bad upon validation failure during read").
Since 'make_bad_inode()' resets inode type to S_IFREG, doing this for directory inode during active VFS lookup is likely to confuse the latter, including VFS_BUG_ON_INODE() triggered in this case.
Affected products
3- osv-coords2 versions
>= 6.19.0, < 7.2.6+ 1 more
- (no CPE)range: >= 6.19.0, < 7.2.6
- (no CPE)range: < 7.2.8-1.1
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.