The Linux kernel’s ocfs2 filesystem driver allows an attacker to create an oversized group bitmap descriptor that exceeds the physical bitmap capacity of the group descriptor block. Because the driver only checks the chain geometry and not the allocated bitmap size, subsequent bitmap scans and updates can read or write beyond the bounds of the bitmap, triggering a KASAN use‑after‑free and corrupting kernel memory. This unchecked input flaw (CWE‑825) can potentially be leveraged to execute arbitrary kernel‑level code or elevate privileges on an affected system.

All Linux kernel releases that ship an ocfs2 module and have not incorporated the patch described in the referenced commit series are affected. The vulnerability is confined to the ocfs2 driver; other filesystem drivers are not impacted. No specific version range is listed, so any kernel prior to the fix commit is considered vulnerable.

The CVSS score of 8.8 indicates a high severity vulnerability, while the EPSS score of <1% shows a very low likelihood of exploitation at this time. The vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that an attacker would need local privileged access or the ability to supply a crafted ocfs2 filesystem image to inject an oversized descriptor. Consequently, the likely attack vector is local or supply‑chain; remote exploitation over a network interface appears unlikely without first achieving local write access.