What’s Vulnerable › Vulnerabilities

CVE-2026-97488: qnx4: handle set_blocksize failures

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-24 · updated 2026-10-03

Description

In the Linux kernel, the following vulnerability has been resolved: qnx4: handle set_blocksize failures qnx4 uses buffer_heads, which don't handle block size > PAGE_SIZE well. Without this, mounting will hit the BUG_ON(offset >= folio_size(folio)); in folio_set_bh on the first __bread_gfp call.

Affected products

• Linux kernel: 2.6.12 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/3f2088a3973faf3ed9b56ea3d3f0240b9a797016
• https://git.kernel.org/stable/c/60f7ccf669882262330171eda51a4f52fa2e69c9
• https://git.kernel.org/stable/c/aac97a4b3f47c36a47f934aa679407b718b67537
• https://git.kernel.org/stable/c/c7d911ea1cc9a63b07e52f5e75b263be0615b289
• https://git.kernel.org/stable/c/c9f03e750d9ddf0f42c24e3ba683f26e377ffd72
• https://git.kernel.org/stable/c/de8bd760ca0c2a3f337bbafbeb1dcad0853787cc
• https://git.kernel.org/stable/c/f83e416c2242fb298ad33b756c83aae75d9e359c

Get alerted when CVE-2026-97488 or the next vulnerability affects your stack