{
  "cveId": "CVE-2026-74350",
  "url": "https://patchblox.com/security/cve/CVE-2026-74350",
  "summary": "CVE-2026-74350 is fixed in linux on 1 platform, first by DEBIAN-CVE-2026-74350, released August 15, 2026. It is not reported as exploited. Patch Radar priority: Urgent.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ocfs2: validate fast symlink target during inode...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  ocfs2: validate fast symlink target during inode read  ocfs2_validate_inode_block() already rejects several inconsistent self-contained dinodes before they are exposed to the rest of the filesystem.  Fast symlinks need the same treatment.  A zero-cluster symlink is treated as a fast symlink and later read through page_get_link() and ocfs2_fast_symlink_read_folio().  That path uses strnlen() on the inline payload and then copies len \u002B 1 bytes into the folio.  If a corrupt dinode stores an i_size that does not fit the inline area or omits the terminating NUL at i_size, that copy reads past the end of the inode block buffer.  Reject zero-cluster symlink dinodes whose i_size exceeds the inline fast-symlink capacity or whose inline payload is not NUL-terminated exactly at i_size when the inode block is validated.  This keeps malformed fast symlinks from reaching the read path.  Validation reproduced this kernel report: KASAN use-after-free in ocfs2_fast_symlink_read_folio\u002B0x12c/0x1f0 RIP: 0033:0x7f5c6d859aa7 Read of size 3905 Call trace:   dump_stack_lvl\u002B0x66/0xa0 (?:?)   print_report\u002B0xce/0x630 (?:?)   ocfs2_fast_symlink_read_folio\u002B0x12c/0x1f0 (fs/ocfs2/inode.c:?)   srso_alias_return_thunk\u002B0x5/0xfbef5 (?:?)   __virt_addr_valid\u002B0x19f/0x330 (?:?)   kasan_report\u002B0xe0/0x110 (?:?)   kasan_check_range\u002B0x105/0x1b0 (?:?)   __asan_memcpy\u002B0x23/0x60 (?:?)   filemap_read_folio\u002B0x27/0xe0 (?:?)   filemap_read_folio\u002B0x35/0xe0 (?:?)   do_read_cache_folio\u002B0x138/0x230 (?:?)   __page_get_link\u002B0x26/0x110 (?:?)   page_get_link\u002B0x2e/0x70 (?:?)   vfs_readlink\u002B0x15e/0x250 (?:?)   touch_atime\u002B0x4d/0x370 (?:?)   do_readlinkat\u002B0x186/0x200 (?:?)   do_user_addr_fault\u002B0x65a/0x890 (?:?)   __x64_sys_readlink\u002B0x46/0x60 (?:?)   do_syscall_64\u002B0x115/0x6a0 (arch/x86/entry/syscall_64.c:87)   entry_SYSCALL_64_after_hwframe\u002B0x77/0x7f (?:?)",
  "published": "2026-08-15T06:22:36Z",
  "severity": "critical",
  "cvss": 9.8,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00477,
  "epssPercentile": 0.41495,
  "priority": "Urgent",
  "priorityTier": 2,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.12.115-2",
      "fix": "DEBIAN-CVE-2026-74350",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-74350",
      "released": "2026-08-15T22:38:55Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "7.1.5-1",
      "fix": "DEBIAN-CVE-2026-74350",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-74350",
      "released": "2026-08-15T22:38:55Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-10T13:56:55Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}