CVE-2026-53041

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix listxattr handling when the buffer is full [BUG] If an OCFS2 inode has both inline and block-based xattrs, listxattr() can return a size larger than the caller's buffer when the inline names consume that buffer exactly. kernel BUG at mm/usercopy.c:102! Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI RIP: 0010:usercopy_abort+0xb7/0xd0 mm/usercopy.c:102 Call Trace: __check_heap_object+0xe3/0x120 mm/slub.c:8243 check_heap_object mm/usercopy.c:196 [inline] __check_object_size mm/usercopy.c:250 [inline] __check_object...

Affected product and versions

Product

Linux Linux, linux kernel

Affected versions

>= 936b8834366ec05f2a6993f73afd8348cac9718e < a35a1c2b170b5b578b1b3fecb95694796552af9a, >= 936b8834366ec05f2a6993f73afd8348cac9718e < 2323084c17370304f49c84b354fe7b3edbb264fe, >= 936b8834366ec05f2a6993f73afd8348cac9718e < 6f702b00b8124c5d3525f19172934544826a114d, >= 936b8834366ec05f2a6993f73afd8348cac9718e < d919b905939eda93393e3572900ff70dbad2b47f, >= 936b8834366ec05f2a6993f73afd8348cac9718e < 46e66fefb83811958127bc9ad736983ec629d82b, >= 936b8834366ec05f2a6993f73afd8348cac9718e < 2685df8577a38d83b367c8cf52eda9dc286959ff, >= 936b8834366ec05f2a6993f73afd8348cac9718e < 50033ec1350fe68abdc63b950ced7ae57364b77a, >= 936b8834366ec05f2a6993f73afd8348cac9718e < d12f558e6200b3f47dbef9331ed6d115d2410e59, >= 2.6.28, >= 2.6.28 < 5.10.258, >= 5.11 < 5.15.209, >= 5.16 < 6.1.175, >= 6.2 < 6.6.141, >= 6.7 < 6.12.91, >= 6.13 < 6.18.33, >= 6.19 < 7.0.10

Fixed versions

5.10.258, 5.15.209, 6.1.175, 6.6.141, 6.12.91, 6.18.33, 7.0.10

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE

CWE-787