Skip to main content
VulnerabilityPublished Updated

CVE-2026-97542: Linux kernel · xfs: bail out on bitmap errors in xrep_agfl_fill

Affects Linux kernelSource CVE Database V5

0

Not known to be exploited · fixed in eaf580538eb1be3d162400d04c4b7dc4c627296b : patch Linux kernel soon.

Data as of 26 Oct 2026, 14:05 UTC

Severity
High

Rated High by Threat Radar's AI analysis · CVSS not yet scored by NVD

EPSS
0.2% chance of exploitation in 30 days – higher than 9% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in eaf580538eb1be3d162400d04c4b7dc4c627296b, e49977bc568c2649cf1a37992e538df8e3779ee4, c2bf1299aeff6db186aa0db8d19328e1816f0e39 +2

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 25 Sep 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 014ad53732d2bac34d21a251f3622a4da516e21b, < eaf580538eb1be3d162400d04c4b7dc4c627296b
Fixed in
  • eaf580538eb1be3d162400d04c4b7dc4c627296b
LinuxLinuxAffected
  • ≥ 014ad53732d2bac34d21a251f3622a4da516e21b, < e49977bc568c2649cf1a37992e538df8e3779ee4
Fixed in
  • e49977bc568c2649cf1a37992e538df8e3779ee4
LinuxLinuxAffected
  • ≥ 014ad53732d2bac34d21a251f3622a4da516e21b, < c2bf1299aeff6db186aa0db8d19328e1816f0e39
Fixed in
  • c2bf1299aeff6db186aa0db8d19328e1816f0e39
LinuxLinuxAffected
  • ≥ 014ad53732d2bac34d21a251f3622a4da516e21b, < b5309ae6504e9b727d83bdfb2a19f44896a8f019
Fixed in
  • b5309ae6504e9b727d83bdfb2a19f44896a8f019
LinuxLinuxAffected
  • ≥ 014ad53732d2bac34d21a251f3622a4da516e21b, < 82a0fd3fe908914425798b6be2b9b0a4f69ff84d
Fixed in
  • 82a0fd3fe908914425798b6be2b9b0a4f69ff84d
LinuxLinuxAffected
  • =6.6
Fixed in–

AI-suggested

The vulnerability is fixed in Linux kernel version 6.6. Users and administrators should update to this version or later to ensure the issue is resolved. No additional mitigation steps are indicated.

Description

A vulnerability in the Linux kernel's XFS filesystem code was addressed by adding error handling for bitmap errors in the xrep_agfl_fill function. Previously, errors from the xagb_bitmap_walk call were ignored, potentially leading to inconsistent in-memory data structures. This flaw was fixed in Linux kernel version 6.6.

References

Community reviews

Loading reviews…