CVE-2026-97490

affs: handle set_blocksize failures

State: Published
Severity: Not scored
Published: Sep 24, 2026
Updated: Oct 3, 2026
Reserved: Sep 24, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

affs: handle set_blocksize failures

affs uses buffer_heads, which don't handle block size > PAGE_SIZE well. Without this, mounting we will hit the

BUG_ON(offset >= folio_size(folio));

in folio_set_bh on the first __bread_gfp call.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f5d65b2811872e8f8b424860fa7c2500afbbc5a6Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c7f29c5d999093629712c63792abda89a36b428dAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d05b0ee9b42cb3cc499272d1bc91609f7492a1a8Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ea8a4a9f3cc101207611be724a8b83838de9a93fAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before bb45146a661934ef801f8fc62f88cdbcf6584ed1Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e01af5aa641039e000af855f448475316f0550fcAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0861182af5983a39bd2a891966436c5679b74a45Affected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 5.10.271 through 5.10.Not affected 5.15.222 through 5.15.Not affected 6.1.189 through 6.1.Not affected 6.6.158 through 6.6.Not affected 6.12.111 through 6.12.Not affected 6.18.53 through 6.18.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f5d65b2811872e8f8b424860fa7c2500afbbc5a6Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c7f29c5d999093629712c63792abda89a36b428dAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d05b0ee9b42cb3cc499272d1bc91609f7492a1a8Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ea8a4a9f3cc101207611be724a8b83838de9a93fAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before bb45146a661934ef801f8fc62f88cdbcf6584ed1Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e01af5aa641039e000af855f448475316f0550fcAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0861182af5983a39bd2a891966436c5679b74a45Affected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
5.10.271 through 5.10.*Not affected
5.15.222 through 5.15.*Not affected
6.1.189 through 6.1.*Not affected
6.6.158 through 6.6.*Not affected
6.12.111 through 6.12.*Not affected
6.18.53 through 6.18.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.