What’s Vulnerable › Vulnerabilities

CVE-2026-98447: xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-18 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots LOLLM noticed that the inode btree root formatting methods copy too many bytes -- there's only one set of keys in node blocks, not two. This causes memory corruption of whatever's beyond the buffers.

Affected products

• Linux kernel: 6.14 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/2703b954d306ebfe3b11e33e259759329c11b690
• https://git.kernel.org/stable/c/d46492fb8018d12d00651b06b9d240e747110b38
• https://git.kernel.org/stable/c/fe2f9135df43db849e74f03956d322ac20b59af7

Get alerted when CVE-2026-98447 or the next vulnerability affects your stack