CVE-2026-74349
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
In the Linux kernel, a vulnerability in the OCFS2 filesystem was fixed where FITRIM accepted ranges shorter than the cluster size, leading to arithmetic underflow and potential trimming beyond the requested range. Now ranges shorter than the cluster size are rejected.
Risk Assessment
The vulnerability could lead to improper TRIM operations, potentially causing data corruption or filesystem malfunction.
Recommendation
It is recommended to update the Linux kernel to a version with the fix and avoid running FITRIM on OCFS2 systems until then.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject FITRIM ranges shorter than a cluster ocfs2_trim_mainbm() trims the global bitmap in cluster units, but its too-short range validation only checks sb->s_blocksize. On filesystems with a cluster size larger than the block size, a FITRIM range that is at least one block but shorter than one cluster is accepted and shifted down to len == 0. The later start + len - 1 and len -= ... arithmetic then underflows and can drive trimming past the requested range. Reject ranges shorter than s_clustersize instead. That preserves the existing -EINVAL behavior for requests that cannot discard even one allocation unit and keeps zero-cluster trims out of the group walk.