CVE-2026-97548
Received Received - Intake

XFS Btree Cursor Size Miscalculation in Linux Kernel

Publication date: 2026-09-25

Last updated on: 2026-09-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: xfs: fix the rtrmap and rtrefcount _maxlevels_ondisk functions The _maxlevels_ondisk functions are used to compute the size of in-memory btree cursors for each btree type. Unfortunately, LOLLM noticed that the rtrmap and rtrefcount versions of these functions forget to account for the inode root, which means that we could access beyond the end of the cursor given a sufficiently large btree. Fix this.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-25
Last Modified
2026-09-25
Generated
2026-09-25
AI Q&A
2026-09-25
EPSS Evaluated
N/A
NVD
CVE-2026-97548
EUVD
EUVD-2026-86856

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves incorrect calculations in the rtrmap and rtrefcount _maxlevels_ondisk functions. These functions determine the size of in-memory btree cursors for specific btree types. The issue is that they fail to account for the inode root, which could lead to accessing memory beyond the allocated cursor size if the btree is large enough.

Impact Analysis

This vulnerability could cause system instability or crashes by allowing out-of-bounds memory access in the Linux kernel. It may lead to data corruption, denial of service, or potential privilege escalation if exploited. Systems using affected XFS filesystems could be at risk.

Mitigation Strategies

Update the Linux kernel to the latest patched version to resolve the XFS rtrmap and rtrefcount _maxlevels_ondisk functions vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-97548. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart