Patch Forecast
Yellow warning
Plan into this sprint.

CVE-2026-97548

In the Linux kernel, the following vulnerability has been resolved: xfs: fix the rtrmap and…

Risk score
58/100
CVSS
7.8 v3.1
Exploit chance (30 days)
0.2%
Published
25 Sep 2026

Open in the live forecast Today's forecast

What to know

What it is
In the Linux kernel, the following vulnerability has been resolved: xfs: fix the rtrmap and rtrefcount _maxlevels_ondisk functions The _maxlevels_ondisk functions are used to compute the size of in-memory btree cursors for each btree type. Unfortunately, LOLLM noticed that the rtrmap and rtrefcount versions of these f…
Affected
See advisory
Fix
Apply the vendor's security update; see the linked advisory.
Exploitation
No known exploitation

Why it is Yellow

  • CVSS 7.8 high
  • On your watchlist: linux kernel

References

Original description

In the Linux kernel, the following vulnerability has been resolved: xfs: fix the rtrmap and rtrefcount _maxlevels_ondisk functions The _maxlevels_ondisk functions are used to compute the size of in-memory btree cursors for each btree type. Unfortunately, LOLLM noticed that the rtrmap and rtrefcount versions of these functions forget to account for the inode root, which means that we could access beyond the end of the cursor given a sufficiently large btree. Fix this.

Last activity 25 Sep 2026. Patch Forecast updates every hour.