The vulnerability in the Linux kernel OCFS2 filesystem (CVE-2026-90320) stemmed from inadequate validation of external xattr entries during metadata reads. The function ocfs2_validate_xattr_block() checked the xattr block header but failed to verify that the xh_count and entry offsets of non-indexed blocks fit within the block boundaries. Similarly, indexed buckets were passed to consumers without entry-bounds checks. This allowed corrupted external xattr metadata to be processed, leading to out-of-range entry arrays or name/value offsets, causing use-after-free errors as detected by KASAN. The fix introduced distinct validators for flat and bucketed xattr entries to ensure all offsets and counts are within valid bounds, preventing corrupted metadata from being used during listxattr() or getxattr() system calls.

Exploitation of this vulnerability could lead to use-after-free conditions and out-of-bounds memory reads in the kernel during extended attribute listing or retrieval operations on OCFS2 filesystems. The CVSS score of 7.8 indicates high severity with potential for confidentiality, integrity, and availability impacts. However, exploitation requires local access (AV:L) and user interaction (UI:R). No known exploits in the wild have been reported.

A fix for this vulnerability has been implemented in the Linux kernel by adding comprehensive validation of external xattr entries in OCFS2 metadata reads. Users should apply the official kernel updates that include this patch. Since this is not a cloud service, remediation depends on deploying updated kernel versions. Patch status is confirmed by the vendor advisory indicating the vulnerability has been resolved.