7.1

CVE-2026-74349

ocfs2: reject FITRIM ranges shorter than a cluster

In the Linux kernel, the following vulnerability has been resolved:

ocfs2: reject FITRIM ranges shorter than a cluster

ocfs2_trim_mainbm() trims the global bitmap in cluster units, but its
too-short range validation only checks sb->s_blocksize.

On filesystems with a cluster size larger than the block size, a FITRIM
range that is at least one block but shorter than one cluster is accepted
and shifted down to len == 0.  The later start + len - 1 and len -= ... 
arithmetic then underflows and can drive trimming past the requested
range.

Reject ranges shorter than s_clustersize instead.  That preserves the
existing -EINVAL behavior for requests that cannot discard even one
allocation unit and keeps zero-cluster trims out of the group walk.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
Produkt Linux
Default Statusunaffected
Version aa89762c54800208d5afdcd8e6bf124818f17fe0
Version < d903d59c0315f59bdf0214b4f13d71c9feb2c45c
Status affected
Version aa89762c54800208d5afdcd8e6bf124818f17fe0
Version < 441abb77222f155e8d931dbabb465466db01cfd7
Status affected
Version aa89762c54800208d5afdcd8e6bf124818f17fe0
Version < e652d0f5108e447b22da4249bcd23dd1b63c73dd
Status affected
Version aa89762c54800208d5afdcd8e6bf124818f17fe0
Version < 346314bb0cc2fc52b50b73d6ecc62e0217455c2e
Status affected
Version aa89762c54800208d5afdcd8e6bf124818f17fe0
Version < 06c0a0431b9856506fcd9b2c1b0c6136567d756d
Status affected
Version aa89762c54800208d5afdcd8e6bf124818f17fe0
Version < 3fa7139b5f42731a61f78c42433adae13f9adc21
Status affected
Version aa89762c54800208d5afdcd8e6bf124818f17fe0
Version < 2c13e02592b918be7725ab5965e01ef4e46c4b57
Status affected
Version aa89762c54800208d5afdcd8e6bf124818f17fe0
Version < ca1afd88f5eaaff9168e1466e5401385edf59543
Status affected
HerstellerLinux
Produkt Linux
Default Statusaffected
Version 3.14
Status affected
Version 0
Version < 3.14
Status unaffected
Version <= 5.10.*
Version 5.10.261
Status unaffected
Version <= 5.15.*
Version 5.15.212
Status unaffected
Version <= 6.1.*
Version 6.1.178
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.97
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.027
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.1 1.8 5.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/d903d59c0315f59bdf0214b4f13d71c9feb2c45c
https://git.kernel.org/stable/c/441abb77222f155e8d931dbabb465466db01cfd7
https://git.kernel.org/stable/c/e652d0f5108e447b22da4249bcd23dd1b63c73dd
https://git.kernel.org/stable/c/346314bb0cc2fc52b50b73d6ecc62e0217455c2e
https://git.kernel.org/stable/c/06c0a0431b9856506fcd9b2c1b0c6136567d756d
https://git.kernel.org/stable/c/3fa7139b5f42731a61f78c42433adae13f9adc21
https://git.kernel.org/stable/c/2c13e02592b918be7725ab5965e01ef4e46c4b57
https://git.kernel.org/stable/c/ca1afd88f5eaaff9168e1466e5401385edf59543