All vulnerabilities
CVE-2026-97544

Linux: xfs: don't leak dqacct if rhashtable insertion fails

Linux LinuxOperating systems
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.20%Chance of exploitation activity in the next 30 days, higher than 9% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in9036e078bd51683e862afd5ed25ecba2f780b165Also 7791970a76a3e23f6f51451dbb1e48bd57f94f93, 788c3a46ef9d79f875312b95cffe0961a13167a7 and 1 moreCVE List
Published25 Sep 2026Updated 19 Oct 2026CVE List

What fixes it

  • 9036e078bd51683e862afd5ed25ecba2f780b165LinuxCVE List
  • 7791970a76a3e23f6f51451dbb1e48bd57f94f93LinuxCVE List
  • 788c3a46ef9d79f875312b95cffe0961a13167a7LinuxCVE List
  • 2eac8d01d2c776fc26b0ac74aebdf91bc4490891LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

xfs: don't leak dqacct if rhashtable insertion fails

LOLLM observes that xqcheck_mod_live_ino_dqtrx doesn't free the newly allocated dqa object if rhashtable insertion fails. Fix this leak.

Text from CVE List

Affected versions 10

  • Linuxaffected: 200491875ce144fdc49827387fff2f604b73c0a9 before 9036e078bd51683e862afd5ed25ecba2f780b165CVE List
  • Linuxaffected: 200491875ce144fdc49827387fff2f604b73c0a9 before 7791970a76a3e23f6f51451dbb1e48bd57f94f93CVE List
  • Linuxaffected: 200491875ce144fdc49827387fff2f604b73c0a9 before 788c3a46ef9d79f875312b95cffe0961a13167a7CVE List
  • Linuxaffected: 200491875ce144fdc49827387fff2f604b73c0a9 before 2eac8d01d2c776fc26b0ac74aebdf91bc4490891CVE List
  • Linuxaffected: 6.9CVE List
  • Linuxunaffected: all versions before 6.9CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2.7 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 4