CVE-2026-97487 - Vulnerability Details

Description

In the Linux kernel, the following vulnerability has been resolved:

jfs: handle set_blocksize failures

jfs uses buffer_heads, which don't handle block size > PAGE_SIZE well.
Without this, mounting we will hit the

BUG_ON(offset >= folio_size(folio));

in folio_set_bh on the first __bread_gfp call.

Published: 2026-09-24

Score: 5.5 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

The Linux kernel treats JFS filesystem block sizes that exceed PAGE_SIZE incorrectly. When mounting a JFS volume with a large block size, the kernel triggers an assertion failure in folio_set_bh during the first read operation, causing a BUG_ON and crashing the kernel. This vulnerability results in a complete loss of service for the affected node.

Affected Systems

The issue is present in all Linux kernel builds that include the JFS filesystem module. No specific kernel releases are listed, so any kernel version capable of mounting JFS may be affected if a block size larger than PAGE_SIZE is used.

Risk and Exploitability

The vulnerability requires the attacker to have the ability to mount a JFS filesystem, which typically requires root or privileged access. Because of that limitation, the threat surface is primarily local. All attackers who can create an adverse mount operation will cause a denial of service by crashing the kernel. The CVSS score is 5.5, the EPSS score is < 1%, and the vulnerability is not currently listed in the CISA KEV catalog.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< e2712fa5c02cd1b3e40d45bc8ce581f3c67bf4b4
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< deb9400a38849e03210c9169b777e89e74debe96
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< a0eaa3f4b6dcc829228752f6255f0e45cc94b273
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 87d6852f06c5a29f757f7b7ad1423e4cbd0f2cad
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< a0ac22af8acca6ea6c57aff72662086cb3243b1c
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 153374ee67a458c77b5755d3cc57fbdc639d327e
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 05107f5602751fcfd3d108c1f579eb45aabead52

Linux

affected

Version	Status	Constraints
`2.6.12`	affected	—
`0`	unaffected	< 2.6.12
`5.10.271`	unaffected	≤ 5.10.*
`5.15.222`	unaffected	≤ 5.15.*
`6.1.189`	unaffected	≤ 6.1.*
`6.6.158`	unaffected	≤ 6.6.*
`6.12.111`	unaffected	≤ 6.12.*
`6.18.53`	unaffected	≤ 6.18.*
`7.2`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,a0ac22af8acca6ea6c57aff72662086cb3243b1c)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,153374ee67a458c77b5755d3cc57fbdc639d327e)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,05107f5602751fcfd3d108c1f579eb45aabead52)`	affected	code_commit	—
`[0,6.12.111)`	affected	semver	—
`[0,6.18.53)`	affected	semver	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[6.12.111,6.13.0)`	unaffected	semver	—
`[6.18.53,6.19.0)`	unaffected	semver	—
`[7.2,*]`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Update the Linux kernel to a version that contains the fix for the JFS block‑size handling issue
Configure or verify that any JFS filesystems are constructed with block sizes that do not exceed the kernel PAGE_SIZE parameter
If an upgrade is not immediately possible, avoid mounting JFS filesystems or restrict mount privileges until the patch is applied

Generated by OpenCVE AI on October 1, 2026 at 12:13 UTC.

Tracking

Sign in to view the affected projects.

Advisories

Source	ID	Title
Debian DLA	DLA-4817-1	linux-6.12 security update
Debian DSA	DSA-6528-1	linux security update

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00173.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-97487.mbox
https://git.kernel.org/stable/c/05107f5602751fcfd3d108c1f579eb45aabead52
https://git.kernel.org/stable/c/153374ee67a458c77b5755d3cc57fbdc639d327e
https://git.kernel.org/stable/c/87d6852f06c5a29f757f7b7ad1423e4cbd0f2cad
https://git.kernel.org/stable/c/a0ac22af8acca6ea6c57aff72662086cb3243b1c
https://git.kernel.org/stable/c/a0eaa3f4b6dcc829228752f6255f0e45cc94b273
https://git.kernel.org/stable/c/deb9400a38849e03210c9169b777e89e74debe96
https://git.kernel.org/stable/c/e2712fa5c02cd1b3e40d45bc8ce581f3c67bf4b4
https://nvd.nist.gov/vuln/detail/CVE-2026-97487
https://www.cve.org/CVERecord?id=CVE-2026-97487

History

Sat, 03 Oct 2026 11:15:00 +0000

Type	Values Removed	Values Added
References		https://git.kernel.org/stable/c/87d6852f06c5a29f757f7b7ad1423e4cbd0f2cad https://git.kernel.org/stable/c/a0eaa3f4b6dcc829228752f6255f0e45cc94b273 https://git.kernel.org/stable/c/deb9400a38849e03210c9169b777e89e74debe96 https://git.kernel.org/stable/c/e2712fa5c02cd1b3e40d45bc8ce581f3c67bf4b4

Wed, 30 Sep 2026 00:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-617
References		https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-97487.mbox https://nvd.nist.gov/vuln/detail/CVE-2026-97487 https://www.cve.org/CVERecord?id=CVE-2026-97487
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Low`

Fri, 25 Sep 2026 07:30:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-119

Thu, 24 Sep 2026 16:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: jfs: handle set_blocksize failures jfs uses buffer_heads, which don't handle block size > PAGE_SIZE well. Without this, mounting we will hit the BUG_ON(offset >= folio_size(folio)); in folio_set_bh on the first __bread_gfp call.
Title		jfs: handle set_blocksize failures
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/05107f5602751fcfd3d108c1f579eb45aabead52 https://git.kernel.org/stable/c/153374ee67a458c77b5755d3cc57fbdc639d327e https://git.kernel.org/stable/c/a0ac22af8acca6ea6c57aff72662086cb3243b1c

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-09-24T16:04:32.648Z

Updated: 2026-10-03T10:58:51.819Z

Reserved: 2026-09-24T16:01:01.150Z

Link: CVE-2026-97487

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-09-24T17:17:26.263

Modified: 2026-10-03T11:17:58.697

Link: CVE-2026-97487

Redhat

Severity : Low

Publid Date: 2026-09-24T00:00:00Z

Links: CVE-2026-97487 - Bugzilla

OpenCVE Enrichment

Updated: 2026-10-01T12:15:05Z

Weaknesses

CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-617
Reachable Assertion

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object