CVE-2026-97520
Linux: gfs2: move quota_init qc iterator increment
Linux LinuxOperating systemsCVSS
7.1HighExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.12%Chance of exploitation activity in the next 30 days, higher than 1% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in04ec2f3b29b3c8a59950b8816b5ebc8ba052808aAlso 21a50a9373adab35ffadf5cf59272dc99078170e, 942202677f8f2ee448a6a2feb06aeeaf520342e3CVE List
What fixes it
- 04ec2f3b29b3c8a59950b8816b5ebc8ba052808aLinuxCVE List
- 21a50a9373adab35ffadf5cf59272dc99078170eLinuxCVE List
- 942202677f8f2ee448a6a2feb06aeeaf520342e3LinuxCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
In the Linux kernel, the following vulnerability has been resolved:
gfs2: move quota_init qc iterator increment
Move qc++ from the loop body into the for-loop increment expression in gfs2_quota_init().
This keeps iterator progression explicit and avoids mixing pointer advance with duplicate-slot handling in the loop body.
Text from CVE List
Affected versions 8
- Linuxaffected: de0d95c26c41c1776e4d23b1a8b3f2bcfd1dae5f before 04ec2f3b29b3c8a59950b8816b5ebc8ba052808aCVE List
- Linuxaffected: de0d95c26c41c1776e4d23b1a8b3f2bcfd1dae5f before 21a50a9373adab35ffadf5cf59272dc99078170eCVE List
- Linuxaffected: de0d95c26c41c1776e4d23b1a8b3f2bcfd1dae5f before 942202677f8f2ee448a6a2feb06aeeaf520342e3CVE List
- Linuxaffected: 6.11CVE List
- Linuxunaffected: all versions before 6.11CVE List
- Linuxunaffected: 6.12.111 through 6.12.*CVE List
- Linuxunaffected: 6.18.53 through 6.18.*CVE List
- Linuxunaffected: 7.2CVE List