What’s Vulnerable › Vulnerabilities

CVE-2026-97544: xfs: don't leak dqacct if rhashtable insertion fails

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-25 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: xfs: don't leak dqacct if rhashtable insertion fails LOLLM observes that xqcheck_mod_live_ino_dqtrx doesn't free the newly allocated dqa object if rhashtable insertion fails. Fix this leak.

Affected products

• Linux kernel: 6.9 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/2eac8d01d2c776fc26b0ac74aebdf91bc4490891
• https://git.kernel.org/stable/c/7791970a76a3e23f6f51451dbb1e48bd57f94f93
• https://git.kernel.org/stable/c/788c3a46ef9d79f875312b95cffe0961a13167a7
• https://git.kernel.org/stable/c/9036e078bd51683e862afd5ed25ecba2f780b165

Get alerted when CVE-2026-97544 or the next vulnerability affects your stack