In the Linux kernel, the following vulnerability has been resolved: ocfs2: always run deallocs on copy-on-write completion Local fuzzing of 6.12.94… (CVE-2026-89496)
A memory leak vulnerability in the Linux kernel's ocfs2 filesystem was identified and resolved. The issue was found through local fuzzing of version 6.12.94 and involves unreferenced objects caused by using the copy_file_range() function within the same filesystem. The vulnerability relates to the failure to run deallocations properly on copy-on-write completion in ocfs2.
AI Analysis
Technical Summary
The Linux kernel's ocfs2 filesystem had a memory leak vulnerability discovered via local fuzzing of version 6.12.94. The leak occurs due to unreferenced objects when performing copy_file_range() operations within the same filesystem. This was caused by not always running deallocations upon copy-on-write completion. The detailed backtrace shows the leak involves ocfs2_cache_block_dealloc and related functions in the ocfs2 allocation and refcount tree code paths. The vulnerability has been resolved in the kernel.
Potential Impact
The vulnerability causes a memory leak in the ocfs2 filesystem when copy_file_range() is used locally within the same filesystem. This could lead to increased memory consumption and potential resource exhaustion on affected systems. There is no indication of remote exploitation or privilege escalation from the provided data.
Mitigation Recommendations
A fix has been applied to the Linux kernel to resolve this memory leak in ocfs2. Users should update to the fixed kernel version that includes this patch. Since this is a kernel-level fix, upgrading the kernel to a version that contains the resolution is the recommended mitigation.
In the Linux kernel, the following vulnerability has been resolved: ocfs2: always run deallocs on copy-on-write completion Local fuzzing of 6.12.94… (CVE-2026-89496)
Description
A memory leak vulnerability in the Linux kernel's ocfs2 filesystem was identified and resolved. The issue was found through local fuzzing of version 6.12.94 and involves unreferenced objects caused by using the copy_file_range() function within the same filesystem. The vulnerability relates to the failure to run deallocations properly on copy-on-write completion in ocfs2.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel's ocfs2 filesystem had a memory leak vulnerability discovered via local fuzzing of version 6.12.94. The leak occurs due to unreferenced objects when performing copy_file_range() operations within the same filesystem. This was caused by not always running deallocations upon copy-on-write completion. The detailed backtrace shows the leak involves ocfs2_cache_block_dealloc and related functions in the ocfs2 allocation and refcount tree code paths. The vulnerability has been resolved in the kernel.
Potential Impact
The vulnerability causes a memory leak in the ocfs2 filesystem when copy_file_range() is used locally within the same filesystem. This could lead to increased memory consumption and potential resource exhaustion on affected systems. There is no indication of remote exploitation or privilege escalation from the provided data.
Mitigation Recommendations
A fix has been applied to the Linux kernel to resolve this memory leak in ocfs2. Users should update to the fixed kernel version that includes this patch. Since this is a kernel-level fix, upgrading the kernel to a version that contains the resolution is the recommended mitigation.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-wxhh-3jvh-r4hp
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-89496"]
Threat ID: 6aa4a01655bf5e2cf5a866e4
Added to database: 09/12/2026, 00:43:02 UTC
Last enriched: 09/12/2026, 01:11:46 UTC
Last updated: 09/12/2026, 01:11:46 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.