CVE-2026-74349

ocfs2: reject FITRIM ranges shorter than a cluster

State: Published
Severity: 7.1 High
Published: Aug 15, 2026
Updated: Oct 16, 2026
Reserved: Aug 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ocfs2: reject FITRIM ranges shorter than a cluster

ocfs2_trim_mainbm() trims the global bitmap in cluster units, but its too-short range validation only checks sb->s_blocksize.

On filesystems with a cluster size larger than the block size, a FITRIM range that is at least one block but shorter than one cluster is accepted and shifted down to len == 0. The later start + len - 1 and len -= ... arithmetic then underflows and can drive trimming past the requested range.

Reject ranges shorter than s_clustersize instead. That preserves the existing -EINVAL behavior for requests that cannot discard even one allocation unit and keeps zero-cluster trims out of the group walk.

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	aa89762c54800208d5afdcd8e6bf124818f17fe0 to before d903d59c0315f59bdf0214b4f13d71c9feb2c45cAffected aa89762c54800208d5afdcd8e6bf124818f17fe0 to before 441abb77222f155e8d931dbabb465466db01cfd7Affected aa89762c54800208d5afdcd8e6bf124818f17fe0 to before e652d0f5108e447b22da4249bcd23dd1b63c73ddAffected aa89762c54800208d5afdcd8e6bf124818f17fe0 to before 346314bb0cc2fc52b50b73d6ecc62e0217455c2eAffected aa89762c54800208d5afdcd8e6bf124818f17fe0 to before 06c0a0431b9856506fcd9b2c1b0c6136567d756dAffected aa89762c54800208d5afdcd8e6bf124818f17fe0 to before 3fa7139b5f42731a61f78c42433adae13f9adc21Affected aa89762c54800208d5afdcd8e6bf124818f17fe0 to before 2c13e02592b918be7725ab5965e01ef4e46c4b57Affected aa89762c54800208d5afdcd8e6bf124818f17fe0 to before ca1afd88f5eaaff9168e1466e5401385edf59543Affected
LinuxLinux	3.14Affected before 3.14Not affected 5.10.261 through 5.10.Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

aa89762c54800208d5afdcd8e6bf124818f17fe0 to before d903d59c0315f59bdf0214b4f13d71c9feb2c45cAffected
aa89762c54800208d5afdcd8e6bf124818f17fe0 to before 441abb77222f155e8d931dbabb465466db01cfd7Affected
aa89762c54800208d5afdcd8e6bf124818f17fe0 to before e652d0f5108e447b22da4249bcd23dd1b63c73ddAffected
aa89762c54800208d5afdcd8e6bf124818f17fe0 to before 346314bb0cc2fc52b50b73d6ecc62e0217455c2eAffected
aa89762c54800208d5afdcd8e6bf124818f17fe0 to before 06c0a0431b9856506fcd9b2c1b0c6136567d756dAffected
aa89762c54800208d5afdcd8e6bf124818f17fe0 to before 3fa7139b5f42731a61f78c42433adae13f9adc21Affected
aa89762c54800208d5afdcd8e6bf124818f17fe0 to before 2c13e02592b918be7725ab5965e01ef4e46c4b57Affected
aa89762c54800208d5afdcd8e6bf124818f17fe0 to before ca1afd88f5eaaff9168e1466e5401385edf59543Affected

LinuxLinux

3.14Affected
before 3.14Not affected
5.10.261 through 5.10.*Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.