CVE-2026-97486

hpfs: handle set_blocksize failures

State: Published
Severity: Not scored
Published: Sep 24, 2026
Updated: Oct 3, 2026
Reserved: Sep 24, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

hpfs: handle set_blocksize failures

hpfs uses buffer_heads, which don't handle block size > PAGE_SIZE well. Without this, mounting will hit the

BUG_ON(offset >= folio_size(folio));

in folio_set_bh on the first __bread_gfp call.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f7b0cde62edb8ceff8bcc17ba3f1b086646fff89Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b618f681acb6748faf95eee9af2aac5455a74e68Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 10f226687bcb07ed925a453b6f25e817165d113bAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0451927f42b0282d80d402e8e8c46ff34e9f606fAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before fc79fcc78cb771f2a803e52149cac5ca9050fd05Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f27e21cf3c0446a3536ea9b588a78a46b0a2cb66Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a405996f23e04942aad064ab8d50c55827482872Affected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 5.10.271 through 5.10.Not affected 5.15.222 through 5.15.Not affected 6.1.189 through 6.1.Not affected 6.6.158 through 6.6.Not affected 6.12.111 through 6.12.Not affected 6.18.53 through 6.18.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f7b0cde62edb8ceff8bcc17ba3f1b086646fff89Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b618f681acb6748faf95eee9af2aac5455a74e68Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 10f226687bcb07ed925a453b6f25e817165d113bAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0451927f42b0282d80d402e8e8c46ff34e9f606fAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before fc79fcc78cb771f2a803e52149cac5ca9050fd05Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f27e21cf3c0446a3536ea9b588a78a46b0a2cb66Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a405996f23e04942aad064ab8d50c55827482872Affected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
5.10.271 through 5.10.*Not affected
5.15.222 through 5.15.*Not affected
6.1.189 through 6.1.*Not affected
6.6.158 through 6.6.*Not affected
6.12.111 through 6.12.*Not affected
6.18.53 through 6.18.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.