CVE-2026-97545: xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-25 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails LOLLM observes that in xfs_btree_bload_prep_block, xfs_btree_bload_drop_buf can hit an IO error if writing the delwri buffer list to disk fails. In this case, we fail to release new_bp, which means we lose a locked buffer. Fix that.

Affected products

Linux kernel: 6.8 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/176a53af77b430e1c19ee15fc492145ace666de7
https://git.kernel.org/stable/c/355b8a5d7e9a38fca8dbf7a4721450252ac7868f
https://git.kernel.org/stable/c/b19dfd4546088a0823e0c47f8ceb6b2775bd1ac7
https://git.kernel.org/stable/c/f1930bc578095409c2dcfca6e4e898b24f0f0de6

Get alerted when CVE-2026-97545 or the next vulnerability affects your stack