CVE-2026-97489

bfs: handle set_blocksize failures

State: Published
Severity: Not scored
Published: Sep 24, 2026
Updated: Oct 3, 2026
Reserved: Sep 24, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

bfs: handle set_blocksize failures

bfs uses buffer_heads, which don't handle block size > PAGE_SIZE well. Without this, mounting will hit the

BUG_ON(offset >= folio_size(folio));

in folio_set_bh on the first __bread_gfp call.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 965b53ee91cfda3faf8bd0d0ffff5f70c7d1c479Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0fe260d82555ffebfb627cd23cbb6e880399804cAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c6d069c34d57414c039167967ef826a8516c98f3Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8a96010d230a8c83181137d88bad4bf71d862628Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7cc713b29eecc0189a184e82f42d174fddaa9e1eAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ab1d6160d26e6ee8939e994999be9b45e90a42efAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2430e3380936df0b648af720cae624eef035a2d1Affected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 5.10.271 through 5.10.Not affected 5.15.222 through 5.15.Not affected 6.1.189 through 6.1.Not affected 6.6.158 through 6.6.Not affected 6.12.111 through 6.12.Not affected 6.18.53 through 6.18.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 965b53ee91cfda3faf8bd0d0ffff5f70c7d1c479Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0fe260d82555ffebfb627cd23cbb6e880399804cAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c6d069c34d57414c039167967ef826a8516c98f3Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8a96010d230a8c83181137d88bad4bf71d862628Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7cc713b29eecc0189a184e82f42d174fddaa9e1eAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ab1d6160d26e6ee8939e994999be9b45e90a42efAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2430e3380936df0b648af720cae624eef035a2d1Affected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
5.10.271 through 5.10.*Not affected
5.15.222 through 5.15.*Not affected
6.1.189 through 6.1.*Not affected
6.6.158 through 6.6.*Not affected
6.12.111 through 6.12.*Not affected
6.18.53 through 6.18.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.