CVE-2026-64256 xfs: don't wrap around quota ids in dqiterate

🗓️ 25 Jul 2026 08:49:08Reported by LinuxType

In the Linux kernel, the following vulnerability has been resolved: xfs: don't wrap around quota ids in dqiterate LOLLM noticed that q_id is an unsigned 32-bit variable. If it happensto be set to XFS_DQ_ID_MAX due to a filesystem that actually has...

Reporter	Title	Published	Views	Family All 9
CVE	CVE-2026-64256	25 Jul 202608:49	–	cve
Debian CVE	CVE-2026-64256	25 Jul 202608:49	–	debiancve
EUVD	EUVD-2026-48968	25 Jul 202608:49	–	euvd
NVD	CVE-2026-64256	25 Jul 202610:17	–	nvd
OSV	CVE-2026-64256 xfs: don't wrap around quota ids in dqiterate	25 Jul 202608:49	–	osv
OSV	DEBIAN-CVE-2026-64256	25 Jul 202610:17	–	osv
Positive Technologies	PT-2026-64477	25 Jul 202600:00	–	ptsecurity
SUSE CVE	SUSE CVE-2026-64256	25 Jul 202616:47	–	susecve
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-64256	25 Jul 202600:00	–	nessus

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/xfs/scrub/dqiterate.c"
    ],
    "versions": [
      {
        "version": "21d7500929c8a0b10e22a6755850c6f9a9280284",
        "lessThan": "249e311c2ba392ceaf9ebfc145a46922946f069a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "21d7500929c8a0b10e22a6755850c6f9a9280284",
        "lessThan": "d1c4c40599c376aeb0c93068a2ae344e79ee4b90",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "21d7500929c8a0b10e22a6755850c6f9a9280284",
        "lessThan": "2b14fe1e0924c6b901f4256456342569c5397abe",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "21d7500929c8a0b10e22a6755850c6f9a9280284",
        "lessThan": "d766e4e5e85d829629c3ba503802fe1303d7b591",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/xfs/scrub/dqiterate.c"
    ],
    "versions": [
      {
        "version": "6.8",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.8",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.96",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.39",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1.4",
        "lessThanOrEqual": "7.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.2-rc4",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/2b14fe1e0924c6b901f4256456342569c5397abe
git	www.git.kernel.org/stable/c/d766e4e5e85d829629c3ba503802fe1303d7b591
git	www.git.kernel.org/stable/c/d1c4c40599c376aeb0c93068a2ae344e79ee4b90
git	www.git.kernel.org/stable/c/249e311c2ba392ceaf9ebfc145a46922946f069a

25 Jul 2026 08:49Current

EPSS0.002