What’s Vulnerable › Vulnerabilities

CVE-2026-97487: jfs: handle set_blocksize failures

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-24 · updated 2026-10-03

Description

In the Linux kernel, the following vulnerability has been resolved: jfs: handle set_blocksize failures jfs uses buffer_heads, which don't handle block size > PAGE_SIZE well. Without this, mounting we will hit the BUG_ON(offset >= folio_size(folio)); in folio_set_bh on the first __bread_gfp call.

Affected products

• Linux kernel: 2.6.12 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/05107f5602751fcfd3d108c1f579eb45aabead52
• https://git.kernel.org/stable/c/153374ee67a458c77b5755d3cc57fbdc639d327e
• https://git.kernel.org/stable/c/87d6852f06c5a29f757f7b7ad1423e4cbd0f2cad
• https://git.kernel.org/stable/c/a0ac22af8acca6ea6c57aff72662086cb3243b1c
• https://git.kernel.org/stable/c/a0eaa3f4b6dcc829228752f6255f0e45cc94b273
• https://git.kernel.org/stable/c/deb9400a38849e03210c9169b777e89e74debe96
• https://git.kernel.org/stable/c/e2712fa5c02cd1b3e40d45bc8ce581f3c67bf4b4

Get alerted when CVE-2026-97487 or the next vulnerability affects your stack