CVE-2026-97550 xfs: fix unit conversions in per_binval computation

Not scored Published Updated

A unit conversion error in the XFS filesystem's per_binval computation can lead to incorrect buffer invalidation, potentially causing system instability or denial of service.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Local or same network only
Victim action needed
Not needed
Fix
Available

What is CVE-2026-97550?

CVE-2026-97550 is a vulnerability in Linux, published on 25 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

In the Linux kernel, the following vulnerability has been resolved:

xfs: fix unit conversions in per_binval computation

LOLLM noticed that we're doing the unit conversion in the per_binval computation backwards -- xfs_buf_inval_log_space's second parameter is supposed to be in bytes, but max_binval is in units of fsblocks. Hence the conversion should be FSB -> B, not the other way around.

Which versions are affected by CVE-2026-97550?

How do I fix CVE-2026-97550?

Apply the vendor's patch.

Is CVE-2026-97550 being exploited?

There is no known exploitation of CVE-2026-97550 in the wild and no public exploit code.

Sources

Also known as BELL-CVE-2026-97550, DEBIAN-CVE-2026-97550, GHSA-j93m-m3f2-m54f, UBUNTU-CVE-2026-97550.

Is CVE-2026-97550 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free