In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject FITRIM ranges shorter than a cluster ocfs2_trim_mainbm() trims the global bitmap in cluster units, but its too-short range validation only checks sb->s_blocksize. On filesystems with a cluster size larger than the block size, a FITRIM range that is at least one block but shorter than one cluster is accepted and shifted down to len == 0. The later start + len - 1 and len -= ... arithmetic then underflows and can drive trimming past the requested range. Reject ranges shorter than s_clustersize instead. That preserves the existing -EINVAL behavior for requests that cannot discard even one allocation unit and keeps zero-cluster trims out of the group walk.

Metrics

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/06c0a0431b9856506fcd9b2c1b0c6136567d756d cve-icon cve-icon
https://git.kernel.org/stable/c/2c13e02592b918be7725ab5965e01ef4e46c4b57 cve-icon cve-icon
https://git.kernel.org/stable/c/346314bb0cc2fc52b50b73d6ecc62e0217455c2e cve-icon cve-icon
https://git.kernel.org/stable/c/3fa7139b5f42731a61f78c42433adae13f9adc21 cve-icon cve-icon
https://git.kernel.org/stable/c/441abb77222f155e8d931dbabb465466db01cfd7 cve-icon cve-icon
https://git.kernel.org/stable/c/ca1afd88f5eaaff9168e1466e5401385edf59543 cve-icon cve-icon
https://git.kernel.org/stable/c/d903d59c0315f59bdf0214b4f13d71c9feb2c45c cve-icon cve-icon
https://git.kernel.org/stable/c/e652d0f5108e447b22da4249bcd23dd1b63c73dd cve-icon cve-icon
History

Sat, 15 Aug 2026 06:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject FITRIM ranges shorter than a cluster ocfs2_trim_mainbm() trims the global bitmap in cluster units, but its too-short range validation only checks sb->s_blocksize. On filesystems with a cluster size larger than the block size, a FITRIM range that is at least one block but shorter than one cluster is accepted and shifted down to len == 0. The later start + len - 1 and len -= ... arithmetic then underflows and can drive trimming past the requested range. Reject ranges shorter than s_clustersize instead. That preserves the existing -EINVAL behavior for requests that cannot discard even one allocation unit and keeps zero-cluster trims out of the group walk.
Title ocfs2: reject FITRIM ranges shorter than a cluster
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-15T05:58:36.630Z

Reserved: 2026-08-15T05:44:03.886Z

Link: CVE-2026-74349

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:22:36.130

Modified: 2026-08-15T06:22:36.130

Link: CVE-2026-74349

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.