CVE-2026-97490

Received Received - Intake

Buffer Overflow in Linux Kernel AFFS Filesystem

Publication date: 2026-09-24

Last updated on: 2026-10-03

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: affs: handle set_blocksize failures affs uses buffer_heads, which don't handle block size > PAGE_SIZE well. Without this, mounting we will hit the BUG_ON(offset >= folio_size(folio)); in folio_set_bh on the first __bread_gfp call.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-24

Last Modified

2026-10-03

Generated

2026-10-15

AI Q&A

2026-09-24

EPSS Evaluated

2026-10-13

NVD

CVE-2026-97490

EUVD

EUVD-2026-86088

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel affects the AFFS filesystem. It occurs when setting the block size fails, causing issues with buffer_heads that cannot handle block sizes larger than the system page size. This leads to a kernel bug when mounting filesystems, triggering a BUG_ON condition in folio_set_bh during the first __bread_gfp call.

Detection Guidance

This vulnerability is specific to the Linux kernel's AFFS filesystem handling. Detection involves checking kernel logs for mount failures or BUG_ON errors related to block size mismatches. Monitor system logs for errors during filesystem mounting or storage device access.

Impact Analysis

If you use a Linux system with the AFFS filesystem, this vulnerability could cause system crashes or instability when mounting filesystems. It may lead to kernel panics or unexpected behavior, disrupting normal operations.

Compliance Impact

This vulnerability affects the Linux kernel's AFFS filesystem handling of block sizes, which could lead to filesystem corruption or crashes during mounting. This may impact compliance with standards requiring data integrity and availability, such as GDPR (data protection) or HIPAA (healthcare data), if systems relying on AFFS fail to maintain secure or reliable storage operations.

Mitigation Strategies

Apply the latest Linux kernel patches that address this issue. Avoid mounting filesystems with block sizes larger than PAGE_SIZE. If using AFFS, consider switching to a different filesystem until the patch is applied.

Hi! I’m here to help you understand CVE-2026-97490. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70