CVE-2026-98447

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-98447

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98447.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-98447

Downstream

Published

2026-10-18T15:14:57Z

Modified

2026-10-20T02:30:47Z

Summary

xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots

Details

In the Linux kernel, the following vulnerability has been resolved:

xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots

LOLLM noticed that the inode btree root formatting methods copy too many bytes -- there's only one set of keys in node blocks, not two. This causes memory corruption of whatever's beyond the buffers.

Database specific

{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98447.json"
}

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

f0415af60f482a2192065be8b334b409495ca8a3

Fixed

d46492fb8018d12d00651b06b9d240e747110b38

Fixed

2703b954d306ebfe3b11e33e259759329c11b690

Fixed

fe2f9135df43db849e74f03956d322ac20b59af7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98447.json"

Linux / Kernel

Package

Name: Kernel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

6.14.0

Fixed

6.18.55

Type: ECOSYSTEM
Events: Introduced

6.19.0

Fixed

7.2.9

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98447.json"