All vulnerabilities
CVE-2026-97488

Linux: qnx4: handle set_blocksize failures

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 6% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in3f2088a3973faf3ed9b56ea3d3f0240b9a797016Also 60f7ccf669882262330171eda51a4f52fa2e69c9CVE List
Published24 Sep 2026Updated 3 Oct 2026CVE List

What fixes it

  • 3f2088a3973faf3ed9b56ea3d3f0240b9a797016LinuxCVE List
  • 60f7ccf669882262330171eda51a4f52fa2e69c9LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

qnx4: handle set_blocksize failures

qnx4 uses buffer_heads, which don't handle block size > PAGE_SIZE well. Without this, mounting will hit the

BUG_ON(offset >= folio_size(folio));

in folio_set_bh on the first __bread_gfp call.

Text from CVE List

Affected versions 16

  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before de8bd760ca0c2a3f337bbafbeb1dcad0853787ccCVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 3f2088a3973faf3ed9b56ea3d3f0240b9a797016CVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before c9f03e750d9ddf0f42c24e3ba683f26e377ffd72CVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before f83e416c2242fb298ad33b756c83aae75d9e359cCVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before aac97a4b3f47c36a47f934aa679407b718b67537CVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 60f7ccf669882262330171eda51a4f52fa2e69c9CVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before c7d911ea1cc9a63b07e52f5e75b263be0615b289CVE List
  • Linuxaffected: 2.6.12CVE List
  • Linuxunaffected: all versions before 2.6.12CVE List
  • Linuxunaffected: 5.10.271 through 5.10.*CVE List
  • Linuxunaffected: 5.15.222 through 5.15.*CVE List
  • Linuxunaffected: 6.1.189 through 6.1.*CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2CVE List

References 7