SB20260928383 - Memory corruption in Linux kernel xfs libxfs

Description

This security bulletin contains information about 1 vulnerability.

1) Memory corruption (CVE-ID: CVE-2026-97548)

CWE-ID: CWE-119 - Memory corruption

CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to access memory beyond the end of an in-memory btree cursor.

The vulnerability exists due to an incorrect cursor size calculation in the XFS rtrmap and rtrefcount _maxlevels_ondisk functions when processing a sufficiently large btree. A remote attacker can cause a sufficiently large btree to be processed to access memory beyond the end of an in-memory btree cursor.

User interaction is required.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/108114437915e61e8f88d1cbcc442c3f886a347e
• https://git.kernel.org/stable/c/84316cb25af95a60e655ccc8fe646bb5ad631b71
• https://git.kernel.org/stable/c/aa301322f72f82f26e4ba0826018d41388ab9896