What’s Vulnerable › Vulnerabilities

CVE-2026-97485: omfs: handle set_blocksize failures

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-24 · updated 2026-10-03

Description

In the Linux kernel, the following vulnerability has been resolved: omfs: handle set_blocksize failures omfs uses buffer_heads, which don't handle block size > PAGE_SIZE well. Without this, mounting we will hit the BUG_ON(offset >= folio_size(folio)); in folio_set_bh on the first __bread_gfp call.

Affected products

• Linux kernel: 2.6.27 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/120e0db84a69f18e51ba9ae2d036df3a052a33e1
• https://git.kernel.org/stable/c/18c3d6fcb557f920c9143711497625e70153874c
• https://git.kernel.org/stable/c/29186cd17bb5f501a6ae831dac4fabf637879982
• https://git.kernel.org/stable/c/61ffc31cd8642d7a950b6831720629c8331365f6
• https://git.kernel.org/stable/c/a2a3592ebf3920dd6f2b754d2bb7361f54764e84
• https://git.kernel.org/stable/c/d81e1e9bd1df5948c699cb5aec984acdef5b2681
• https://git.kernel.org/stable/c/fd4d6593c51253c79be422d6ae42e318250e20a7

Get alerted when CVE-2026-97485 or the next vulnerability affects your stack