CVE-2026-98447

high

Description

In the Linux kernel, the following vulnerability has been resolved: xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots LOLLM noticed that the inode btree root formatting methods copy too many bytes -- there's only one set of keys in node blocks, not two. This causes memory corruption of whatever's beyond the buffers.

References

https://git.kernel.org/stable/c/fe2f9135df43db849e74f03956d322ac20b59af7

https://git.kernel.org/stable/c/d46492fb8018d12d00651b06b9d240e747110b38

https://git.kernel.org/stable/c/2703b954d306ebfe3b11e33e259759329c11b690

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-103687

Details

Source: Mitre, NVD

Published: 2026-10-18

Updated: 2026-10-19

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 7.8

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00166