Back to CVE records
High 7.1Published Sep 24, 2026

CVE-2026-97520gfs2: move quota_init qc iterator increment

Updated under an hour ago ()

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

In the Linux kernel, the following vulnerability has been resolved: gfs2: move quota_init qc iterator increment Move qc++ from the loop body into the for-loop increment expression in gfs2_quota_init(). This keeps iterator progression explicit and avoids mixing pointer advance with duplicate-slot handling in the loop body.

CVSS
7.1 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
Weakness (CWE)
Not given
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
Linux
NVD analysis
Received
Record last updated
Sep 28, 2026
First seen by InfoSec Signals
Oct 9, 2026

Affected products

Affected products
Linux Linux
linux:linux (from the name)
from de0d95c26c41c1776e4d23b1a8b3f2bcfd1dae5f before 04ec2f3b29b3c8a59950b8816b5ebc8ba052808a; from de0d95c26c41c1776e4d23b1a8b3f2bcfd1dae5f before 21a50a9373adab35ffadf5cf59272dc99078170e; from de0d95c26c41c1776e4d23b1a8b3f2bcfd1dae5f before 942202677f8f2ee448a6a2feb06aeeaf520342e3
CNA record

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.