CVE-2026-97486: hpfs: handle set_blocksize failures
Published Sep 24, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
hpfs: handle setblocksize failures
hpfs uses bufferheads, which don't handle block size > PAGESIZE well. Without this, mounting will hit the
BUGON(offset >= foliosize(folio));
in foliosetbh on the first breadgfp call.
Affected Software
1 affected component
Linux Linux kernel
Event History
Sep 24, 2026
CVE Published
via MITRE·04:04 PM
Data Sourced
via MITRE·04:04 PM
Description
Data Sourced
via NVD·05:17 PM
Description
Frequently Asked Questions
1
What conditions are required to trigger the failure?
The system must mount an HPFS filesystem whose block size exceeds PAGE_SIZE. During mounting, the first __bread_gfp call can reach a BUG_ON in folio_set_bh because HPFS uses buffer_heads, which do not handle block sizes larger than PAGE_SIZE well.
2
What is the practical impact if the condition is triggered?
Mounting the affected HPFS filesystem can hit a kernel BUG_ON, causing the mount operation to fail and potentially resulting in a kernel crash.