All vulnerabilities
CVE-2026-98445

Linux: xfs: don't let memory failures leak blocks and kill repairs

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 5% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in3380151cf0ce8ad0c1d356fed51e4b69e1d28e50Also 0e0d3372a84029da1768c7a4c4601484af5b58a2CVE List
Published18 Oct 2026Updated 19 Oct 2026CVE List

What fixes it

  • 3380151cf0ce8ad0c1d356fed51e4b69e1d28e50LinuxCVE List
  • 0e0d3372a84029da1768c7a4c4601484af5b58a2LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

xfs: don't let memory failures leak blocks and kill repairs

LOLLM complains that a memory allocation failure in xrep_newbt_add_blocks results in online repair leaking blocks that were previously allocated to write a new btree, but the problem is worse than that -- a limitation of the codebase is that the callers cannot undo the transaction /and/ return the error -- either you undo all changes and commit the transaction, or you error out and the filesystem goes down.

However, the new btree space reservation object isn't that big (~48 bytes). Let's just do a NOFAIL allocation and the problem goes away.

Text from CVE List

Affected versions 10

  • Linuxaffected: be408417630427984a1fddd069f30b245793234c before 3380151cf0ce8ad0c1d356fed51e4b69e1d28e50CVE List
  • Linuxaffected: be408417630427984a1fddd069f30b245793234c before b15c79fca28060fd9c7e77f2c3ebc4ba023974e8CVE List
  • Linuxaffected: be408417630427984a1fddd069f30b245793234c before 0e0d3372a84029da1768c7a4c4601484af5b58a2CVE List
  • Linuxaffected: be408417630427984a1fddd069f30b245793234c before ab1c416d2377cdc16123ef521aac4da1c468c3d4CVE List
  • Linuxaffected: 6.8CVE List
  • Linuxunaffected: all versions before 6.8CVE List
  • Linuxunaffected: 6.12.113 through 6.12.*CVE List
  • Linuxunaffected: 6.18.56 through 6.18.*CVE List
  • Linuxunaffected: 7.2.9 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 4