CVE-2026-97542

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-97542", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-24T16:01:01.154Z", "datePublished": "2026-09-25T10:21:38.646Z", "dateUpdated": "2026-10-19T09:09:04.449Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-19T09:09:04.449Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: bail out on bitmap errors in xrep_agfl_fill\n\nLOLLM also points out that the xagb_bitmap_set call in xrep_agfl_fill\ncan fail, but we don't check the result of xagb_bitmap_walk, so we\nsilently drop the error and proceed with inconsistent incore data.\nThat shouldn't be allowed."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/xfs/scrub/agheader_repair.c"], "versions": [{"version": "014ad53732d2bac34d21a251f3622a4da516e21b", "lessThan": "c2bf1299aeff6db186aa0db8d19328e1816f0e39", "status": "affected", "versionType": "git"}, {"version": "014ad53732d2bac34d21a251f3622a4da516e21b", "lessThan": "e49977bc568c2649cf1a37992e538df8e3779ee4", "status": "affected", "versionType": "git"}, {"version": "014ad53732d2bac34d21a251f3622a4da516e21b", "lessThan": "82a0fd3fe908914425798b6be2b9b0a4f69ff84d", "status": "affected", "versionType": "git"}, {"version": "014ad53732d2bac34d21a251f3622a4da516e21b", "lessThan": "b5309ae6504e9b727d83bdfb2a19f44896a8f019", "status": "affected", "versionType": "git"}, {"version": "014ad53732d2bac34d21a251f3622a4da516e21b", "lessThan": "eaf580538eb1be3d162400d04c4b7dc4c627296b", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/xfs/scrub/agheader_repair.c"], "versions": [{"version": "6.6", "status": "affected"}, {"version": "0", "lessThan": "6.6", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.158", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.111", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.53", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.7", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6", "versionEndExcluding": "6.6.158"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6", "versionEndExcluding": "6.12.111"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6", "versionEndExcluding": "6.18.53"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6", "versionEndExcluding": "7.2.7"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/c2bf1299aeff6db186aa0db8d19328e1816f0e39"}, {"url": "https://git.kernel.org/stable/c/e49977bc568c2649cf1a37992e538df8e3779ee4"}, {"url": "https://git.kernel.org/stable/c/82a0fd3fe908914425798b6be2b9b0a4f69ff84d"}, {"url": "https://git.kernel.org/stable/c/b5309ae6504e9b727d83bdfb2a19f44896a8f019"}, {"url": "https://git.kernel.org/stable/c/eaf580538eb1be3d162400d04c4b7dc4c627296b"}], "title": "xfs: bail out on bitmap errors in xrep_agfl_fill", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["fs/xfs/scrub/agheader_repair.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "c2bf1299aeff6db186aa0db8d19328e1816f0e39", "status": "affected", "version": "014ad53732d2bac34d21a251f3622a4da516e21b", "versionType": "git"}, {"lessThan": "e49977bc568c2649cf1a37992e538df8e3779ee4", "status": "affected", "version": "014ad53732d2bac34d21a251f3622a4da516e21b", "versionType": "git"}, {"lessThan": "82a0fd3fe908914425798b6be2b9b0a4f69ff84d", "status": "affected", "version": "014ad53732d2bac34d21a251f3622a4da516e21b", "versionType": "git"}, {"lessThan": "b5309ae6504e9b727d83bdfb2a19f44896a8f019", "status": "affected", "version": "014ad53732d2bac34d21a251f3622a4da516e21b", "versionType": "git"}, {"lessThan": "eaf580538eb1be3d162400d04c4b7dc4c627296b", "status": "affected", "version": "014ad53732d2bac34d21a251f3622a4da516e21b", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["fs/xfs/scrub/agheader_repair.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.6"}, {"lessThan": "6.6", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.158", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.111", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.53", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.7", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: bail out on bitmap errors in xrep_agfl_fill\n\nLOLLM also points out that the xagb_bitmap_set call in xrep_agfl_fill\ncan fail, but we don't check the result of xagb_bitmap_walk, so we\nsilently drop the error and proceed with inconsistent incore data.\nThat shouldn't be allowed."}], "id": "CVE-2026-97542", "lastModified": "2026-10-19T10:17:23.253", "metrics": {}, "published": "2026-09-25T11:17:04.540", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/82a0fd3fe908914425798b6be2b9b0a4f69ff84d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/b5309ae6504e9b727d83bdfb2a19f44896a8f019"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/c2bf1299aeff6db186aa0db8d19328e1816f0e39"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/e49977bc568c2649cf1a37992e538df8e3779ee4"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/eaf580538eb1be3d162400d04c4b7dc4c627296b"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: xfs: bail out on bitmap errors in xrep_agfl_fill", "id": "2541127", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2541127"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-252", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nxfs: bail out on bitmap errors in xrep_agfl_fill\nLOLLM also points out that the xagb_bitmap_set call in xrep_agfl_fill\ncan fail, but we don't check the result of xagb_bitmap_walk, so we\nsilently drop the error and proceed with inconsistent incore data.\nThat shouldn't be allowed.", "A flaw was found in the Linux kernel's XFS file system. When performing online repair of an allocation group free list (AGFL), the kernel fails to check return values during bitmap processing, silently ignoring errors. A local user capable of triggering file system repair operations could cause the kernel to proceed with inconsistent in-memory metadata, potentially leading to file system corruption or a denial of service (DoS)."], "name": "CVE-2026-97542", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-09-25T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-97542\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-97542\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-97542.mbox"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[014ad53732d2bac34d21a251f3622a4da516e21b, e49977bc568c2649cf1a37992e538df8e3779ee4)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[014ad53732d2bac34d21a251f3622a4da516e21b, 82a0fd3fe908914425798b6be2b9b0a4f69ff84d)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[014ad53732d2bac34d21a251f3622a4da516e21b, b5309ae6504e9b727d83bdfb2a19f44896a8f019)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[014ad53732d2bac34d21a251f3622a4da516e21b, eaf580538eb1be3d162400d04c4b7dc4c627296b)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.6"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,6.6)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.12.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.18.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,7.2.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-09-25T17:30:16.745749+00:00", "updated": "2026-10-01T13:45:06.660997+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}