The Linux kernel ocfs2 filesystem had a vulnerability where the extent map cache was not cleared after moving or defragmenting extents. This caused subsequent operations to read stale extent flags from the cache, which did not match the updated flags on disk. The mismatch leads to a BUG_ON trigger in ocfs2_refcount_cal_cow_clusters(), potentially causing kernel crashes. The problem occurs in a sequence involving copy_file_range() creating reflinked extents, ioctl(FITRIM) triggering extent moves, and the cache not being invalidated after these moves. The fix involves clearing the extent map cache after each extent move or defragment operation in __ocfs2_move_extents_range(), ensuring consistency between cached and on-disk extent flags.

This vulnerability can cause kernel crashes (BUG_ON) due to stale cached extent flags mismatching the actual disk state. This impacts system stability and availability, potentially leading to denial of service. The vulnerability affects the ocfs2 filesystem in the Linux kernel and involves high confidentiality, integrity, and availability impact as indicated by the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The described fix involves clearing the extent map cache after extent move or defragment operations. Users should monitor official Linux kernel advisories for patches addressing CVE-2025-40233 and apply updates when available.