CVE-2026-97485

Received Received - Intake

OMFS filesystem blocksize handling failure

Publication date: 2026-09-24

Last updated on: 2026-10-03

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: omfs: handle set_blocksize failures omfs uses buffer_heads, which don't handle block size > PAGE_SIZE well. Without this, mounting we will hit the BUG_ON(offset >= folio_size(folio)); in folio_set_bh on the first __bread_gfp call.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-24

Last Modified

2026-10-03

Generated

2026-10-15

AI Q&A

2026-09-25

EPSS Evaluated

2026-10-13

NVD

CVE-2026-97485

EUVD

EUVD-2026-86083

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a failure to handle set_blocksize operations in the OMFS filesystem. OMFS uses buffer_heads which do not manage block sizes larger than PAGE_SIZE correctly. This can lead to a kernel bug check (BUG_ON) when mounting the filesystem due to an offset exceeding folio size in folio_set_bh during the first __bread_gfp call.

Detection Guidance

This vulnerability is specific to the Linux kernel's OMFS filesystem handling. Detection requires checking kernel logs for OMFS-related errors or crashes during filesystem operations. Monitor for messages like BUG_ON(offset >= folio_size(folio)) in system logs after attempting to mount OMFS filesystems.

Impact Analysis

If you use the OMFS filesystem on a Linux system, this vulnerability could cause the system to crash or become unstable when mounting the filesystem. This may result in data corruption or denial of service if the filesystem is critical to system operations.

Compliance Impact

This vulnerability affects the Linux kernel's OMFS filesystem by potentially causing filesystem corruption or crashes during mounting operations if block size exceeds PAGE_SIZE. This could lead to data integrity issues or denial of service, which may impact compliance with data protection regulations like GDPR (requiring data integrity) or HIPAA (requiring availability and integrity of health data).

Mitigation Strategies

Apply the latest Linux kernel patches that address this issue. Avoid mounting OMFS filesystems until patched. If OMFS usage is necessary, consider using a filesystem with better block size handling support as a temporary workaround.

Hi! I’m here to help you understand CVE-2026-97485. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70