CVE-2026-98447xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots LOLLM noticed that the inode btree root formatting methods copy too many bytes -- there's only one set of keys in node blocks, not two. This causes memory corruption of whatever's beyond the buffers.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 18, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Linux Linux linux:linux (from the name) | from f0415af60f482a2192065be8b334b409495ca8a3 before d46492fb8018d12d00651b06b9d240e747110b38; from f0415af60f482a2192065be8b334b409495ca8a3 before 2703b954d306ebfe3b11e33e259759329c11b690; from f0415af60f482a2192065be8b334b409495ca8a3 before fe2f9135df43db849e74f03956d322ac20b59af7 | CNA record |
References
- https://git.kernel.org/stable/c/d46492fb8018d12d00651b06b9d240e747110b38
- https://git.kernel.org/stable/c/2703b954d306ebfe3b11e33e259759329c11b690
- https://git.kernel.org/stable/c/fe2f9135df43db849e74f03956d322ac20b59af7
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.