CVE-2026-80644: Linux kernel · ocfs2: don't BUG_ON an invalid journal dinode
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in c0438198c28b1d22c272751af5e717c11d9fa8dd : patch Linux kernel soon.
Data as of 6 Nov 2026, 17:47 UTC
Rated High by Threat Radar's AI analysis · CVSS not yet scored by NVD
Thin evidence
One scorer or none- CISA SSVC
- Exploitation
- No evidence of active exploitation and no public proof of concept
- Automatable
- Attackers cannot reliably automate steps 1–4 of the kill chain
- Technical impact
- Limited control over the software or limited information exposure
CISA SSVC assessment, 2026-11-06.
- Patch
- Available – fixed in c0438198c28b1d22c272751af5e717c11d9fa8dd, bf1d59cf2ac8a1730607ebaa0bc0dc6d00f197d0, b460f8d01a12061853d02c8fb693fb42450acd7d +5
Exploitation evidence
Disclosed: evidence found.
CVE published 28 Aug 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 6 Nov 2026.
What to do
Upgrade to a fixed release listed under Affected software.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
AI-suggested
A fix is available and has been applied in the Linux kernel source. Users should update to a kernel version including the fix identified by the provided commit hashes. The fix replaces the kernel panic trigger with a warning and error return, preventing crashes during mount failures.
Description
A vulnerability in the Linux kernel's OCFS2 filesystem code could cause a kernel crash (BUG_ON) during mount teardown if an invalid journal dinode is encountered. This occurs because a recent code change replaced an error return with a kernel panic trigger. The issue has been fixed by reverting the panic to a warning and returning an error code instead, allowing clean failure without crashing the kernel.
References
- git.kernel.org/stable/c/bf1d59cf2ac8a1730607ebaa0bc0dc6d00f197d0 (opens in a new tab)
- git.kernel.org/stable/c/86509c5296fe46ad6bcdd83931a53c2c6b7913a8 (opens in a new tab)
- git.kernel.org/stable/c/12c32a7350b670aaaaf2e01583d8648ec0c9755c (opens in a new tab)
- git.kernel.org/stable/c/b460f8d01a12061853d02c8fb693fb42450acd7d (opens in a new tab)
- git.kernel.org/stable/c/a06eec15596e5801bad59ad16cd2bf4f0fa839a1 (opens in a new tab)
- git.kernel.org/stable/c/3852478d34c7baa490ba9c7374ee901a56eea577 (opens in a new tab)
- git.kernel.org/stable/c/5b33f99f3e48465bd93219495381a5aef4fa967f (opens in a new tab)
- git.kernel.org/stable/c/c0438198c28b1d22c272751af5e717c11d9fa8dd (opens in a new tab)