CVE-2026-97488qnx4: handle set_blocksize failures
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: qnx4: handle set_blocksize failures qnx4 uses buffer_heads, which don't handle block size > PAGE_SIZE well. Without this, mounting will hit the BUG_ON(offset >= folio_size(folio)); in folio_set_bh on the first __bread_gfp call.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 3, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before de8bd760ca0c2a3f337bbafbeb1dcad0853787cc; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 3f2088a3973faf3ed9b56ea3d3f0240b9a797016; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before c9f03e750d9ddf0f42c24e3ba683f26e377ffd72; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before f83e416c2242fb298ad33b756c83aae75d9e359c; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before aac97a4b3f47c36a47f934aa679407b718b67537; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 60f7ccf669882262330171eda51a4f52fa2e69c9; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before c7d911ea1cc9a63b07e52f5e75b263be0615b289 | CNA record |
References
- https://git.kernel.org/stable/c/de8bd760ca0c2a3f337bbafbeb1dcad0853787cc
- https://git.kernel.org/stable/c/3f2088a3973faf3ed9b56ea3d3f0240b9a797016
- https://git.kernel.org/stable/c/c9f03e750d9ddf0f42c24e3ba683f26e377ffd72
- https://git.kernel.org/stable/c/f83e416c2242fb298ad33b756c83aae75d9e359c
- https://git.kernel.org/stable/c/aac97a4b3f47c36a47f934aa679407b718b67537
- https://git.kernel.org/stable/c/60f7ccf669882262330171eda51a4f52fa2e69c9
- https://git.kernel.org/stable/c/c7d911ea1cc9a63b07e52f5e75b263be0615b289
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.