All vulnerabilities
CVE-2026-98879

Linux: isofs: handle set_blocksize failures

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in6db7f0ba365786304558db6a3d52013ae176e03eAlso 61f277bf35f533b602984f0e55900111fe52f31a, 28d1f6aa14f5924e36602b7a31c9141d34de0b9c and 9 moreCVE List
Published23 Oct 2026Updated 23 Oct 2026CVE List

What fixes it

  • 6db7f0ba365786304558db6a3d52013ae176e03eLinuxCVE List
  • 61f277bf35f533b602984f0e55900111fe52f31aLinuxCVE List
  • 28d1f6aa14f5924e36602b7a31c9141d34de0b9cLinuxCVE List
  • 9c97e3b1152d3092581745189f5d2f04c6404ef9LinuxCVE List
  • 9584ab6283721e5aab485c79bd06c2f78d89e55cLinuxCVE List
  • 25ef4c4d9f0e96fb89c0ae0d7127c3f12a31bc32LinuxCVE List
Show all 12 fixed versions

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

isofs: handle set_blocksize failures

isofs uses buffer_heads, which don't handle block size > PAGE_SIZE well. Without this, mounting we will hit the

BUG_ON(offset >= folio_size(folio));

in folio_set_bh on the first __bread_gfp call.

Text from CVE List

Affected versions 20

  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 6db7f0ba365786304558db6a3d52013ae176e03eCVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 61f277bf35f533b602984f0e55900111fe52f31aCVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before cebde6d88e34396c29f2f001d90e921677cc17d6CVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 28d1f6aa14f5924e36602b7a31c9141d34de0b9cCVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 9c97e3b1152d3092581745189f5d2f04c6404ef9CVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 9584ab6283721e5aab485c79bd06c2f78d89e55cCVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 25ef4c4d9f0e96fb89c0ae0d7127c3f12a31bc32CVE List
  • Linuxaffected: all versions before 5.10.271CVE List
  • Linuxaffected: all versions before 5.15.222CVE List
  • Linuxaffected: all versions before 6.1.189CVE List
  • Linuxaffected: all versions before 6.6.158CVE List
  • Linuxaffected: all versions before 6.12.111CVE List
  • Linuxaffected: all versions before 6.18.53CVE List
  • Linuxunaffected: 5.10.271 through 5.10.*CVE List
  • Linuxunaffected: 5.15.222 through 5.15.*CVE List
  • Linuxunaffected: 6.1.189 through 6.1.*CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2CVE List

References 7