CVE-2026-97489

bfs: handle set_blocksize failures

N/A

Published: September 24, 2026 at 04:04 PM UTC

Updated: October 3, 2026 at 11:17 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: bfs: handle set_blocksize failures bfs uses buffer_heads, which don't handle block size > PAGE_SIZE well. Without this, mounting will hit the BUG_ON(offset >= folio_size(folio)); in folio_set_bh on the first __bread_gfp call.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

2.6.12 ≤ v < 5.10.2712.6.12 ≤ v < 5.15.2222.6.12 ≤ v < 6.1.1892.6.12 ≤ v < 6.12.1112.6.12 ≤ v < 6.18.532.6.12 ≤ v < 6.6.1582.6.12 ≤ v < 7.21da177e4c3f41524e886b7f1b8a0c1fc7321cac2 2.6.12

Vendor states this is fixed in 0fe260d82555ffebfb627cd23cbb6e880399804c (fixed)

Vendor states this is fixed in 2430e3380936df0b648af720cae624eef035a2d1 (fixed)

Vendor states this is fixed in 7cc713b29eecc0189a184e82f42d174fddaa9e1e (fixed)

Vendor states this is fixed in 8a96010d230a8c83181137d88bad4bf71d862628 (fixed)

Vendor states this is fixed in 965b53ee91cfda3faf8bd0d0ffff5f70c7d1c479 (fixed)

Vendor states this is fixed in ab1d6160d26e6ee8939e994999be9b45e90a42ef (fixed)

Vendor states this is fixed in c6d069c34d57414c039167967ef826a8516c98f3 (fixed)

Vendor states this is fixed in 2.6.12 (unaffected)

Vendor states this is fixed in 5.10.271 (unaffected)

Vendor states this is fixed in 5.15.222 (unaffected)

Vendor states this is fixed in 6.1.189 (unaffected)

Vendor states this is fixed in 6.12.111 (unaffected)