All vulnerabilities
CVE-2026-98447

Linux: xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 5% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in2703b954d306ebfe3b11e33e259759329c11b690Fixed versionCVE List
Published18 Oct 2026Updated 19 Oct 2026CVE List

What fixes it

  • 2703b954d306ebfe3b11e33e259759329c11b690LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots

LOLLM noticed that the inode btree root formatting methods copy too many bytes -- there's only one set of keys in node blocks, not two. This causes memory corruption of whatever's beyond the buffers.

Text from CVE List

Affected versions 8

  • Linuxaffected: f0415af60f482a2192065be8b334b409495ca8a3 before d46492fb8018d12d00651b06b9d240e747110b38CVE List
  • Linuxaffected: f0415af60f482a2192065be8b334b409495ca8a3 before 2703b954d306ebfe3b11e33e259759329c11b690CVE List
  • Linuxaffected: f0415af60f482a2192065be8b334b409495ca8a3 before fe2f9135df43db849e74f03956d322ac20b59af7CVE List
  • Linuxaffected: 6.14CVE List
  • Linuxunaffected: all versions before 6.14CVE List
  • Linuxunaffected: 6.18.55 through 6.18.*CVE List
  • Linuxunaffected: 7.2.9 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 3