{"id":"CVE-2026-98445","revision":"0c30213031904f01a27f2beaa17b0ac6","records":[{"revision":"0c30213031904f01a27f2beaa17b0ac6","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-98445","aliases":[],"title":"xfs: don't let memory failures leak blocks and kill repairs","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: don't let memory failures leak blocks and kill repairs\n\nLOLLM complains that a memory allocation failure in\nxrep_newbt_add_blocks results in online repair leaking blocks that were\npreviously allocated to write a new btree, but the problem is worse than\nthat -- a limitation of the codebase is that the callers cannot undo the\ntransaction /and/ return the error -- either you undo all changes and\ncommit the transaction, or you error out and the filesystem goes down.\n\nHowever, the new btree space reservation object isn't that big (~48\nbytes).  Let's just do a NOFAIL allocation and the problem goes away.","state":0,"publishedAt":"2026-10-18T15:14:55.754+00:00","modifiedAt":"2026-10-19T09:19:40.826+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/xfs/scrub/newbt.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"be408417630427984a1fddd069f30b245793234c\",\n                            \"lessThan\": \"3380151cf0ce8ad0c1d356fed51e4b69e1d28e50\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"be408417630427984a1fddd069f30b245793234c\",\n                            \"lessThan\": \"b15c79fca28060fd9c7e77f2c3ebc4ba023974e8\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"be408417630427984a1fddd069f30b245793234c\",\n                            \"lessThan\": \"0e0d3372a84029da1768c7a4c4601484af5b58a2\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"be408417630427984a1fddd069f30b245793234c\",\n                            \"lessThan\": \"ab1c416d2377cdc16123ef521aac4da1c468c3d4\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/xfs/scrub/newbt.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.8\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.8\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.113\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.56\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.9\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/3380151cf0ce8ad0c1d356fed51e4b69e1d28e50","https://git.kernel.org/stable/c/b15c79fca28060fd9c7e77f2c3ebc4ba023974e8","https://git.kernel.org/stable/c/0e0d3372a84029da1768c7a4c4601484af5b58a2","https://git.kernel.org/stable/c/ab1c416d2377cdc16123ef521aac4da1c468c3d4"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98445","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-98445","identifiers":["CVE-2026-98445"]},"retained":false,"historicalAffected":[]}],"coverage":[]}