CVE-2026-97542xfs: bail out on bitmap errors in xrep_agfl_fill
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: xfs: bail out on bitmap errors in xrep_agfl_fill LOLLM also points out that the xagb_bitmap_set call in xrep_agfl_fill can fail, but we don't check the result of xagb_bitmap_walk, so we silently drop the error and proceed with inconsistent incore data. That shouldn't be allowed.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 3, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 014ad53732d2bac34d21a251f3622a4da516e21b before c2bf1299aeff6db186aa0db8d19328e1816f0e39; from 014ad53732d2bac34d21a251f3622a4da516e21b before e49977bc568c2649cf1a37992e538df8e3779ee4; from 014ad53732d2bac34d21a251f3622a4da516e21b before 82a0fd3fe908914425798b6be2b9b0a4f69ff84d; from 014ad53732d2bac34d21a251f3622a4da516e21b before b5309ae6504e9b727d83bdfb2a19f44896a8f019; from 014ad53732d2bac34d21a251f3622a4da516e21b before eaf580538eb1be3d162400d04c4b7dc4c627296b | CNA record |
References
- https://git.kernel.org/stable/c/c2bf1299aeff6db186aa0db8d19328e1816f0e39
- https://git.kernel.org/stable/c/e49977bc568c2649cf1a37992e538df8e3779ee4
- https://git.kernel.org/stable/c/82a0fd3fe908914425798b6be2b9b0a4f69ff84d
- https://git.kernel.org/stable/c/b5309ae6504e9b727d83bdfb2a19f44896a8f019
- https://git.kernel.org/stable/c/eaf580538eb1be3d162400d04c4b7dc4c627296b
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.