What’s Vulnerable › Vulnerabilities

CVE-2026-97520: gfs2: move quota_init qc iterator increment

• Severity: high (CVSS 7.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-24 · updated 2026-09-28

Description

In the Linux kernel, the following vulnerability has been resolved: gfs2: move quota_init qc iterator increment Move qc++ from the loop body into the for-loop increment expression in gfs2_quota_init(). This keeps iterator progression explicit and avoids mixing pointer advance with duplicate-slot handling in the loop body.

Affected products

• Linux kernel: 6.11 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/04ec2f3b29b3c8a59950b8816b5ebc8ba052808a
• https://git.kernel.org/stable/c/21a50a9373adab35ffadf5cf59272dc99078170e
• https://git.kernel.org/stable/c/942202677f8f2ee448a6a2feb06aeeaf520342e3

Get alerted when CVE-2026-97520 or the next vulnerability affects your stack