CVE-2026-97542

xfs: bail out on bitmap errors in xrep_agfl_fill

Published Sep 25, 2026 CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Description

In the Linux kernel, the following vulnerability has been resolved:

xfs: bail out on bitmap errors in xrep_agfl_fill

LOLLM also points out that the xagb_bitmap_set call in xrep_agfl_fill
can fail, but we don't check the result of xagb_bitmap_walk, so we
silently drop the error and proceed with inconsistent incore data.
That shouldn't be allowed.

Analysis

Technical impact

An unchecked return value in the XFS bitmap handling routine xrep_agfl_fill causes the kernel to silently continue with corrupted in‑core data when creating allocation group free lists. The bug allows a caller to induce the routine to act on an unrecoverable bitmap error without any notification, resulting in inconsistent and unreliable filesystem state. This vulnerability threatens the integrity of the filesystem and can lead to data loss or a denial‑of‑service condition if exploited within the kernel.

Affected Systems

All Linux kernel builds that include the XFS filesystem module are affected. The issue resides specifically in the XFS bitmap handling routine xrep_agfl_fill within the kernel source.

Risk and Exploitability

The CVSS score of 5.5 indicates moderate severity. The EPSS score of < 1% suggests a low probability of exploitation and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is local and requires privileged code execution or manipulation of the XFS filesystem; successful exploitation could corrupt allocation group data, leading to data integrity loss or potential denial of service.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`014ad53732d2bac34d21a251f3622a4da516e21b`	affected	< c2bf1299aeff6db186aa0db8d19328e1816f0e39
`014ad53732d2bac34d21a251f3622a4da516e21b`	affected	< e49977bc568c2649cf1a37992e538df8e3779ee4
`014ad53732d2bac34d21a251f3622a4da516e21b`	affected	< 82a0fd3fe908914425798b6be2b9b0a4f69ff84d
`014ad53732d2bac34d21a251f3622a4da516e21b`	affected	< b5309ae6504e9b727d83bdfb2a19f44896a8f019
`014ad53732d2bac34d21a251f3622a4da516e21b`	affected	< eaf580538eb1be3d162400d04c4b7dc4c627296b

Linux

affected

Version	Status	Constraints
`6.6`	affected	—
`0`	unaffected	< 6.6
`6.6.158`	unaffected	≤ 6.6.*
`6.12.111`	unaffected	≤ 6.12.*
`6.18.53`	unaffected	≤ 6.18.*
`7.2.7`	unaffected	≤ 7.2.*
`7.3`	unaffected	≤ *

No data.

Vendor Product Versions

Linux

Linux Kernel

Version	Status	Scheme	Platform
`[014ad53732d2bac34d21a251f3622a4da516e21b, e49977bc568c2649cf1a37992e538df8e3779ee4)`	affected	code_commit	—
`[014ad53732d2bac34d21a251f3622a4da516e21b, 82a0fd3fe908914425798b6be2b9b0a4f69ff84d)`	affected	code_commit	—
`[014ad53732d2bac34d21a251f3622a4da516e21b, b5309ae6504e9b727d83bdfb2a19f44896a8f019)`	affected	code_commit	—
`[014ad53732d2bac34d21a251f3622a4da516e21b, eaf580538eb1be3d162400d04c4b7dc4c627296b)`	affected	code_commit	—

Linux

Linux Kernel

Version	Status	Scheme	Platform
`6.6`	affected	semver	—
`[0,6.6)`	unaffected	semver	—
`[0,6.12.*]`	unaffected	generic	—
`[0,6.18.*]`	unaffected	generic	—
`[0,7.2.*]`	unaffected	generic	—
`[0,*]`	unaffected	generic	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Apply the latest Linux kernel update that contains the XFS bug fix
Reboot the system to load the new kernel and ensure the patch is active
Run XFS fsck on all affected filesystems to detect and correct any pre‑existing corruption

Generated by OpenCVE AI on October 1, 2026 at 13:44 UTC.

Tracking

Advisories

Source	ID	Title
Debian DLA	DLA-4817-1	linux-6.12 security update
Debian DSA	DSA-6528-1	linux security update
Ubuntu USN	USN-9019-1	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-9020-1	Linux kernel vulnerabilities
Ubuntu USN	USN-9022-1	Linux kernel vulnerabilities
Ubuntu USN	USN-9023-1	Linux kernel vulnerabilities
Ubuntu USN	USN-9024-1	Linux kernel vulnerabilities
Ubuntu USN	USN-9025-1	Linux kernel vulnerabilities
Ubuntu USN	USN-9026-1	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-9039-1	Linux kernel (Azure CVM) vulnerabilities
Ubuntu USN	USN-9040-1	Linux kernel (Low Latency NVIDIA) vulnerabilities
Ubuntu USN	USN-9066-1	Linux kernel (HWE) vulnerabilities
Ubuntu USN	USN-9091-1	Linux kernel (NVIDIA Tegra) vulnerabilities

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.200% probability within 30 days)

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-97542.mbox
https://git.kernel.org/stable/c/82a0fd3fe908914425798b6be2b9b0a4f69ff84d
https://git.kernel.org/stable/c/b5309ae6504e9b727d83bdfb2a19f44896a8f019
https://git.kernel.org/stable/c/c2bf1299aeff6db186aa0db8d19328e1816f0e39
https://git.kernel.org/stable/c/e49977bc568c2649cf1a37992e538df8e3779ee4
https://git.kernel.org/stable/c/eaf580538eb1be3d162400d04c4b7dc4c627296b
https://nvd.nist.gov/vuln/detail/CVE-2026-97542
https://www.cve.org/CVERecord?id=CVE-2026-97542

History

Oct 3, 2026 11:15 AM Added references View changes

Type	Values Removed	Values Added
References		https://git.kernel.org/stable/c/c2bf1299aeff6db186aa0db8d19328e1816f0e39

Oct 1, 2026 11:15 AM Weaknesses updated View changes

Type	Values Removed	Values Added
Weaknesses	CWE-665 CWE-778

Sep 29, 2026 1:15 PM Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Weaknesses		CWE-252
References		https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-97542.mbox https://nvd.nist.gov/vuln/detail/CVE-2026-97542 https://www.cve.org/CVERecord?id=CVE-2026-97542
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Low`

Sep 25, 2026 11:15 PM Weaknesses updated View changes

Type	Values Removed	Values Added
Weaknesses		CWE-665 CWE-778

Sep 25, 2026 10:30 AM Description updated. Title updated. First appearance in the feed. Affected versions updated. Affected vendors updated. Added references View changes

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: xfs: bail out on bitmap errors in xrep_agfl_fill LOLLM also points out that the xagb_bitmap_set call in xrep_agfl_fill can fail, but we don't check the result of xagb_bitmap_walk, so we silently drop the error and proceed with inconsistent incore data. That shouldn't be allowed.
Title		xfs: bail out on bitmap errors in xrep_agfl_fill
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/82a0fd3fe908914425798b6be2b9b0a4f69ff84d https://git.kernel.org/stable/c/b5309ae6504e9b727d83bdfb2a19f44896a8f019 https://git.kernel.org/stable/c/e49977bc568c2649cf1a37992e538df8e3779ee4 https://git.kernel.org/stable/c/eaf580538eb1be3d162400d04c4b7dc4c627296b