In the Linux kernel, the following vulnerability has been resolved:
ocfs2: clear extent cache after moving/defragmenting extents
The extent map cache can become stale when extents are moved or defragmented, causing subsequent operations to see outdated extent flags. This triggers a BUG_ON in ocfs2_refcount_cal_cow_clusters().
The problem occurs when: 1. copy_file_range() creates a reflinked extent with OCFS2_EXT_REFCOUNTED 2. ioctl(FITRIM) triggers ocfs2_move_extents() 3. __ocfs2_move_extents_range() reads and caches the extent (flags=0x2) 4. ocfs2_move_extent()/ocfs2_defrag_extent() calls __ocfs2_move_extent() which clears OCFS2_EXT_REFCOUNTED flag on disk (flags=0x0) 5. The extent map cache is not invalidated after the move 6. Later write() operations read stale cached flags (0x2) but disk has updated flags (0x0), causing a mismatch 7. BUG_ON(!(rec->e_flags & OCFS2_EXT_REFCOUNTED)) triggers
Fix by clearing the extent map cache after each extent move/defrag operation in __ocfs2_move_extents_range(). This ensures subsequent operations read fresh extent data from disk.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Dec 8, 2025 | Dec 8, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 15, 2025 | Dec 4, 2025 |
| Ubuntu | — | Upgrade linux-image-xilinxUpgrade linux-image-gcp-6.17Upgrade linux-image-realtime-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-1094-ibmUpgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-170-genericUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1052-nvidia-tegra-rtUpgrade linux-image-5.15.0-1100-aws-fipsUpgrade linux-image-6.17.0-1007-oracleUpgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-1041-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1099-realtimeUpgrade linux-image-5.15.0-1100-gcpUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-5.15.0-1083-gkeopUpgrade linux-image-5.15.0-1109-azure-fipsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-azure-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.17.0-1006-realtimeUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-oem-6.17Upgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-1097-raspiUpgrade linux-image-raspi-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-realtime-6.8.1Upgrade linux-image-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-gke-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1064-xilinx-zynqmpUpgrade linux-image-5.15.0-1096-gkeUpgrade linux-image-virtual-6.17Upgrade linux-image-aws-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1097-oracleUpgrade linux-image-6.8.0-106-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-fips-5.15Upgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-1100-aws-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1095-nvidiaUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi-6.17Upgrade linux-image-realtime-6.17Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.17.0-1007-awsUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-raspi-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1092-intel-iot-realtimeUpgrade linux-image-awsUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1050-awsUpgrade linux-image-5.15.0-1095-nvidia-lowlatencyUpgrade linux-image-5.15.0-1100-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-azure-fips-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.17.0-1007-gcpUpgrade linux-image-5.15.0-1110-azureUpgrade linux-image-azure-fipsUpgrade linux-image-6.17.0-1007-aws-64kUpgrade linux-image-generic-64k-6.17Upgrade linux-image-generic-64k-5.15Upgrade linux-image-gke-64kUpgrade linux-image-genericUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.17.0-1007-oracle-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-5.15.0-1100-gcp-fipsUpgrade linux-image-oem-22.04Upgrade linux-image-generic-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibmUpgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-170-lowlatencyUpgrade linux-image-5.15.0-1095-intel-iotgUpgrade linux-image-6.17.0-14-generic-64kUpgrade linux-image-5.15.0-1092-kvmUpgrade linux-image-5.15.0-1052-nvidia-tegraUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-virtual-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-6.17.0-1007-gcp-64kUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-azure-6.17Upgrade linux-image-5.15.0-170-generic-64kUpgrade linux-image-generic-6.17Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-kvm-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-6.17Upgrade linux-image-nvidiaUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.17.0-1008-azureUpgrade linux-image-5.15.0-170-fipsUpgrade linux-image-oracle-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-6.17.0-14-genericUpgrade linux-image-6.17.0-1008-raspiUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-fipsUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-gcp-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-fipsUpgrade linux-image-aws-64k-6.17Upgrade linux-image-aws-64k-5.15Upgrade linux-image-aws-6.17Upgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-5.15.0-170-generic-lpaeUpgrade linux-image-5.15.0-1041-nvidia-tegra-igxUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-intelUpgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-gkeopUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04Upgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-6.17.0-1011-oemUpgrade linux-image-5.15.0-1109-azureUpgrade linux-image-5.15.0-170-lowlatency-64k | Feb 13, 2026 | Feb 12, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub