Live › vulnerability › CVE-2026-98879
Go to dashboardIn the Linux kernel's isofs driver, a block size larger than the page size is not rejected cleanly when mounting, so the kernel hits a BUG_ON during the first buffer read. The sources describe a kernel crash at mount time, and do not say that an attacker can gain code execution or read data.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems that mount ISO 9660 filesystems with the isofs driver are the ones the fix matters for, mainly hosts that handle CD or DVD images or untrusted disk images. The sources do not say which kernel versions are affected, so systems that never mount isofs media are likely able to skip it, but this is not confirmed.
No product ranges from the sources yet.
uname -r to see the running kernel versionlsmod | grep isofs or modinfo isofsEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
isofs: handle set_blocksize failures
isofs uses buffer_heads, which don't handle block size > PAGE_SIZE well. Without this, mounting we will hit the
BUG_ON(offset >= folio_size(folio));
in folio_set_bh on the first __bread_gfp call.
This page as .md · .json · in your agent: get_signal("CVE-2026-98879")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.