Medium 5.5Published Jul 25, 2026

CVE-2026-64256xfs: don't wrap around quota ids in dqiterate

Updated under an hour ago (Oct 26, 2026, 3:50 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: xfs: don't wrap around quota ids in dqiterate LOLLM noticed that q_id is an unsigned 32-bit variable. If it happens to be set to XFS_DQ_ID_MAX due to a filesystem that actually has a dquot for ID_MAX, then this addition will truncate to zero and the iteration starts over. Fix this by casting to u64.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Aug 17, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 21d7500929c8a0b10e22a6755850c6f9a9280284 before 249e311c2ba392ceaf9ebfc145a46922946f069a; from 21d7500929c8a0b10e22a6755850c6f9a9280284 before d1c4c40599c376aeb0c93068a2ae344e79ee4b90; 21d7500929c8a0b10e22a6755850c6f9a9280284 builds before 2b14fe1e0924c6b901f4256456342569c5397abe; from 21d7500929c8a0b10e22a6755850c6f9a9280284 before d766e4e5e85d829629c3ba503802fe1303d7b591	CNA record
linux linux_kernel linux:linux_kernel	from 6.8 before 6.12.96; from 6.13 before 6.18.39; from 6.19 before 7.1.4; 7.2; 7.2; 7.2	NVD

References

References

https://git.kernel.org/stable/c/249e311c2ba392ceaf9ebfc145a46922946f069a	patch
https://git.kernel.org/stable/c/d1c4c40599c376aeb0c93068a2ae344e79ee4b90	patch
https://git.kernel.org/stable/c/2b14fe1e0924c6b901f4256456342569c5397abe	patch
https://git.kernel.org/stable/c/d766e4e5e85d829629c3ba503802fe1303d7b591	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.