What’s Vulnerable › Vulnerabilities

CVE-2026-97546: xfs: don't spin forever on zero-length dirents when salvaging them

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-25 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: xfs: don't spin forever on zero-length dirents when salvaging them LOLLM noticed that xrep_dir_recover_data can spin forever if it encounters an unused dirent that claims to have length zero. Fix that, and prevent the same thing from happening with a zero-length entry.

Affected products

• Linux kernel: 6.10 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/08754ebfa5c28e8d57316b1bd7a5a921a5e2e762
• https://git.kernel.org/stable/c/5442f0c56445618544a801fb4dae35aed87a1aaa
• https://git.kernel.org/stable/c/9f84792b40d0c96833341602144574bf0bd14a6a
• https://git.kernel.org/stable/c/a455c83ce5dc1a2da33b1b84253d298372a8dfbd

Get alerted when CVE-2026-97546 or the next vulnerability affects your stack