CVE-2026-97488

qnx4: handle set_blocksize failures

State: Published
Severity: Not scored
Published: Sep 24, 2026
Updated: Oct 3, 2026
Reserved: Sep 24, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

qnx4: handle set_blocksize failures

qnx4 uses buffer_heads, which don't handle block size > PAGE_SIZE well. Without this, mounting will hit the

BUG_ON(offset >= folio_size(folio));

in folio_set_bh on the first __bread_gfp call.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before de8bd760ca0c2a3f337bbafbeb1dcad0853787ccAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3f2088a3973faf3ed9b56ea3d3f0240b9a797016Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c9f03e750d9ddf0f42c24e3ba683f26e377ffd72Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f83e416c2242fb298ad33b756c83aae75d9e359cAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before aac97a4b3f47c36a47f934aa679407b718b67537Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 60f7ccf669882262330171eda51a4f52fa2e69c9Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c7d911ea1cc9a63b07e52f5e75b263be0615b289Affected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 5.10.271 through 5.10.Not affected 5.15.222 through 5.15.Not affected 6.1.189 through 6.1.Not affected 6.6.158 through 6.6.Not affected 6.12.111 through 6.12.Not affected 6.18.53 through 6.18.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before de8bd760ca0c2a3f337bbafbeb1dcad0853787ccAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3f2088a3973faf3ed9b56ea3d3f0240b9a797016Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c9f03e750d9ddf0f42c24e3ba683f26e377ffd72Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f83e416c2242fb298ad33b756c83aae75d9e359cAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before aac97a4b3f47c36a47f934aa679407b718b67537Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 60f7ccf669882262330171eda51a4f52fa2e69c9Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c7d911ea1cc9a63b07e52f5e75b263be0615b289Affected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
5.10.271 through 5.10.*Not affected
5.15.222 through 5.15.*Not affected
6.1.189 through 6.1.*Not affected
6.6.158 through 6.6.*Not affected
6.12.111 through 6.12.*Not affected
6.18.53 through 6.18.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.