CVE-2026-97545
Received Received - Intake

XFS Filesystem Buffer Leak in Linux Kernel

Vulnerability report for CVE-2026-97545, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-09-25

Last updated on: 2026-09-25

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails LOLLM observes that in xfs_btree_bload_prep_block, xfs_btree_bload_drop_buf can hit an IO error if writing the delwri buffer list to disk fails. In this case, we fail to release new_bp, which means we lose a locked buffer. Fix that.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-25
Last Modified
2026-09-25
Generated
2026-09-25
AI Q&A
2026-09-25
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux_kernel xfs *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a memory leak in the XFS file system. When an I/O error occurs during buffer list writing in xfs_btree_bload_prep_block, the function xfs_btree_bload_drop_buf fails to release a locked buffer called new_bp. This results in the loss of the buffer, potentially causing system instability or resource exhaustion.

Detection Guidance

This vulnerability is specific to the XFS filesystem in the Linux kernel and may not have direct network detection methods. Monitor kernel logs for XFS-related errors or IO failures during buffer operations. Check for locked buffers or memory leaks in XFS operations using kernel debugging tools like ftrace or dmesg. Example command: dmesg | grep -i xfs

Impact Analysis

This vulnerability could lead to system crashes, data corruption, or denial of service if exploited. It may cause resource leaks, reducing available memory and affecting system performance. Servers or systems relying on XFS file systems are particularly at risk.

Mitigation Strategies

Apply the latest Linux kernel patches or updates that include the fix for this XFS vulnerability. Reboot the system if necessary to ensure the patched kernel is active. Monitor system stability and XFS operations after applying updates.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-97545. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart