Not yet scoredPublished Oct 23, 2026

CVE-2026-98872freevxfs: don't BUG() on unknown typed-extent type

Updated under an hour ago (Oct 27, 2026, 6:10 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: freevxfs: don't BUG() on unknown typed-extent type vxfs_bmap_typed() handles four typed-extent types and calls BUG() in its default case, so an on-disk typed extent with any other type value crashes the kernel. It is reachable from ioctl(FIBMAP) on a regular file: kernel BUG at fs/freevxfs/vxfs_bmap.c:230! RIP: vxfs_bmap_typed fs/freevxfs/vxfs_bmap.c:230 [inline] vxfs_bmap1+0x128a/0x12d0 fs/freevxfs/vxfs_bmap.c:257 Replace the BUG() with WARN_ON_ONCE() and return 0 -- the value vxfs_bmap_typed() already returns on failure (and from the DEV4 case above); vxfs_getblk() maps 0 to -EIO, so the ioctl fails cleanly.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 26, 2026
First seen by InfoSec Signals: Oct 23, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before fe40a19d571cbb584eea46038ee919d8712b2d2c; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 500e9d5bf9eff2096a21b7ac25a0a06ca46ab821; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before f1f2d54a576f0e4133b979e545abcfefd439c300; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 7ada9807e37103b41f586d34e3075e1209182b65; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 1284d687d46953fff9c0d969df108114611aca8b; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 405f13d7b270913e06e8e2b4de568985f94ef7d6; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 704d48d81dc41470e108811c32c577ada66192d4	CNA record

References

References

https://git.kernel.org/stable/c/fe40a19d571cbb584eea46038ee919d8712b2d2c
https://git.kernel.org/stable/c/500e9d5bf9eff2096a21b7ac25a0a06ca46ab821
https://git.kernel.org/stable/c/f1f2d54a576f0e4133b979e545abcfefd439c300
https://git.kernel.org/stable/c/7ada9807e37103b41f586d34e3075e1209182b65
https://git.kernel.org/stable/c/1284d687d46953fff9c0d969df108114611aca8b
https://git.kernel.org/stable/c/405f13d7b270913e06e8e2b4de568985f94ef7d6
https://git.kernel.org/stable/c/704d48d81dc41470e108811c32c577ada66192d4

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.