CVE-2026-80881
ocfs2: fix buffer head management in ocfs2_read_blocks()
Description
In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix buffer head management in ocfs2_read_blocks() In ocfs2_read_blocks(), caller should't assume that buffer head returned by 'sb_getblk()' is exclusively owned and so 'put_bh()' always drops b_count from 1 to 0. If it is not so, buffer head remains on hold and likely to be returned by the next call to 'sb_getblk()' unchanged - that is, with BH_Uptodate bit set even if it has failed validation previously, thus allowing to insert that buffer head into OCFS2 metadata cache and submit it to upper layers. To avoid such a scenario, BH_Uptodate should be cleared immediately after 'validate()' callback has detected some data inconsistency.
INFO
Published Date :
Sept. 4, 2026, 5:17 p.m.
Last Modified :
Sept. 4, 2026, 5:17 p.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Products
The following products are affected by CVE-2026-80881
vulnerability.
Even if cvefeed.io is aware of the exact versions of the
products
that
are
affected, the information is not represented in the table below.
No affected product recoded yet
Solution
- Apply the kernel patch for ocfs2.
- Clear BH_Uptodate after validate callback.
- Ensure buffer head is not reused when inconsistent.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-80881.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-80881 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-80881
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-80881 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-80881 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Sep. 04, 2026
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix buffer head management in ocfs2_read_blocks() In ocfs2_read_blocks(), caller should't assume that buffer head returned by 'sb_getblk()' is exclusively owned and so 'put_bh()' always drops b_count from 1 to 0. If it is not so, buffer head remains on hold and likely to be returned by the next call to 'sb_getblk()' unchanged - that is, with BH_Uptodate bit set even if it has failed validation previously, thus allowing to insert that buffer head into OCFS2 metadata cache and submit it to upper layers. To avoid such a scenario, BH_Uptodate should be cleared immediately after 'validate()' callback has detected some data inconsistency. Added Affected New affected value received. <a href="https://github.com/CVEProject/cvelistV5/blob/main/cves/2026/80xxx/CVE-2026-80881.json">CVE-2026-80881</a> Added Reference https://git.kernel.org/stable/c/0e389fc290c350c67591abf4c367119f4689f310 Added Reference https://git.kernel.org/stable/c/4ab17e328522a4df5fe0f0dcf39098118b1feeaa Added Reference https://git.kernel.org/stable/c/5927acb3e2c99985a14adecd9d1b67ba191c622d Added Reference https://git.kernel.org/stable/c/61f7a5acb3bf8fc97dad78f54b1e8d0e1c819766 Added Reference https://git.kernel.org/stable/c/6371a07148ee979af22a9d6f4c277462953a9a4a Added Reference https://git.kernel.org/stable/c/9e7a057934cdd58e4cc94350bcfe5367bbee0f8e Added Reference https://git.kernel.org/stable/c/a4eae1499c760949a93459d11390bd1fd823d31d Added Reference https://git.kernel.org/stable/c/ecb3f9386f4353034caef77239473c627232db17