All vulnerabilities
CVE-2026-97545

Linux: xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.20%Chance of exploitation activity in the next 30 days, higher than 9% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in355b8a5d7e9a38fca8dbf7a4721450252ac7868fAlso 176a53af77b430e1c19ee15fc492145ace666de7CVE List
Published25 Sep 2026Updated 19 Oct 2026CVE List

What fixes it

  • 355b8a5d7e9a38fca8dbf7a4721450252ac7868fLinuxCVE List
  • 176a53af77b430e1c19ee15fc492145ace666de7LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails

LOLLM observes that in xfs_btree_bload_prep_block, xfs_btree_bload_drop_buf can hit an IO error if writing the delwri buffer list to disk fails. In this case, we fail to release new_bp, which means we lose a locked buffer. Fix that.

Text from CVE List

Affected versions 10

  • Linuxaffected: e069d549705e49841247acf9b3176744e27d5425 before 355b8a5d7e9a38fca8dbf7a4721450252ac7868fCVE List
  • Linuxaffected: e069d549705e49841247acf9b3176744e27d5425 before 176a53af77b430e1c19ee15fc492145ace666de7CVE List
  • Linuxaffected: e069d549705e49841247acf9b3176744e27d5425 before b19dfd4546088a0823e0c47f8ceb6b2775bd1ac7CVE List
  • Linuxaffected: e069d549705e49841247acf9b3176744e27d5425 before f1930bc578095409c2dcfca6e4e898b24f0f0de6CVE List
  • Linuxaffected: 6.8CVE List
  • Linuxunaffected: all versions before 6.8CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2.7 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 4