Skip to main content
← All vulnerabilities
CVE-2026-97543

xfs: destroy seen inode bitmap when we fail to add a dirpath

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 6.12.111, 6.18.53, 7.2.7
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: xfs: destroy seen inode bitmap when we fail to add a dirpath LOLLM observes a memory leak in xchk_dirtree_create_path if we create the directory path object but appending the name to the path fails. When this happens, we don't tear down the (empty) seen inode bitmap. This is a pretty trivial error, but let's not leave logic bombs. Do the same for a similar bug in xrep_dirtree_create_adoption_path.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From 928b721a11789a9363d6d7c32a1f3166a79f3b5f · fixed in 3b10ca4302ee2dda4233f70b2033883ee376fa6a; From 928b721a11789a9363d6d7c32a1f3166a79f3b5f · fixed in 0b756de8167f2f06ffceadc71cb17c1fc7be4be8; From 928b721a11789a9363d6d7c32a1f3166a79f3b5f · fixed in 582f54dce62043f7a0503ab8c76d718d0293da59; From 928b721a11789a9363d6d7c32a1f3166a79f3b5f · fixed in 1a441c6842da75c5b862cc1c9f7969d6a93b54b9

  • Linux Linux

    6.10

  • KernelLinux

    From 6.10.0 · fixed in 6.12.111; From 6.13.0 · fixed in 6.18.53; From 6.19.0 · fixed in 7.2.7

References 4

git.kernel.org