Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-64256

xfs: don't wrap around quota ids in dqiterate

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: xfs: don't wrap around quota ids in dqiterate LOLLM noticed that q_id is an unsigned 32-bit variable. If it happens to be set to XFS_DQ_ID_MAX due to a filesystem that actually has a dquot for ID_MAX, then this addition will truncate to zero and the iteration starts over. Fix this by casting to u64.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 21d7500929c8a0b10e22a6755850c6f9a9280284 to < 249e311c2ba392ceaf9ebfc145a46922946f069aaffected
  • 21d7500929c8a0b10e22a6755850c6f9a9280284 to < d1c4c40599c376aeb0c93068a2ae344e79ee4b90affected
  • 21d7500929c8a0b10e22a6755850c6f9a9280284 to < 2b14fe1e0924c6b901f4256456342569c5397abeaffected
  • 21d7500929c8a0b10e22a6755850c6f9a9280284 to < d766e4e5e85d829629c3ba503802fe1303d7b591affected

Linux Linux

Default version status: affected

  • 6.8affected
  • 0 to < 6.8unaffected
  • 6.12.96 to ≤ 6.12.*unaffected
  • 6.18.39 to ≤ 6.18.*unaffected
  • 7.1.4 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References