CVE-2026-98446xfs: don't let hidden_space go negative in xfs_metafile_resv_init
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: xfs: don't let hidden_space go negative in xfs_metafile_resv_init LOLLM points out that if the amount of fdblocks that we can reserve for a metadata btree file goes below the space already used by that file, then the hidden_space subtraction can underflow, causing xfs_dec_fdblocks to subtract a huge amount of space. We never want the target to be less than the used sapce, so fix the logic that adjusts dblocks_avail downwards. Also fix an error in the adjacent comment.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Linux Linux linux:linux (from the name) | from 1df8d75030b787a9fae270b59b93eef809dd2011 before 930a9c1c321efdaa3e7f8caecb0479cee3baf342; from 1df8d75030b787a9fae270b59b93eef809dd2011 before f0d8352a39f4a2e329ae45b71bb0d49e2ca0a6dc; from 1df8d75030b787a9fae270b59b93eef809dd2011 before 476582d754cdc5110f806001417fea6c77824c13 | CNA record |
References
- https://git.kernel.org/stable/c/930a9c1c321efdaa3e7f8caecb0479cee3baf342
- https://git.kernel.org/stable/c/f0d8352a39f4a2e329ae45b71bb0d49e2ca0a6dc
- https://git.kernel.org/stable/c/476582d754cdc5110f806001417fea6c77824c13
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.