Live › vulnerability › CVE-2026-98447
Go to dashboardIn the Linux kernel's XFS filesystem, formatting on-disk rtrefcount btree roots copies too many bytes, writing past the end of the buffers. An attacker may be able to corrupt kernel memory, but the sources do not say how it can be triggered.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running a Linux kernel with XFS, especially those using XFS real-time volumes, since the bug is in the rtrefcount btree code. Hosts that do not mount XFS filesystems are unlikely to be affected. The sources do not say which kernel versions are vulnerable.
No product ranges from the sources yet.
uname -r and compare it against the fixed kernel in the NVD entry.findmnt -t xfs and whether real-time volumes are configured with xfs_info on the mount point.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots
LOLLM noticed that the inode btree root formatting methods copy too many bytes -- there's only one set of keys in node blocks, not two. This causes memory corruption of whatever's beyond the buffers.
This page as .md · .json · in your agent: get_signal("CVE-2026-98447")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.