GHSA-Q9WC-MGJH-78F8
Vulnerability from github – Published: 2026-10-23 12:31 – Updated: 2026-10-23 12:31In the Linux kernel, the following vulnerability has been resolved:
isofs: handle set_blocksize failures
isofs uses buffer_heads, which don't handle block size > PAGE_SIZE well. Without this, mounting we will hit the
BUG_ON(offset >= folio_size(folio));
in folio_set_bh on the first __bread_gfp call.
{
"affected": [],
"aliases": [
"CVE-2026-98879"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-10-23T12:18:21Z",
"severity": null
},
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nisofs: handle set_blocksize failures\n\nisofs uses buffer_heads, which don\u0027t handle block size \u003e PAGE_SIZE well.\nWithout this, mounting we will hit the\n\n BUG_ON(offset \u003e= folio_size(folio));\n\nin folio_set_bh on the first __bread_gfp call.",
"id": "GHSA-q9wc-mgjh-78f8",
"modified": "2026-10-23T12:31:36Z",
"published": "2026-10-23T12:31:36Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-98879"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/25ef4c4d9f0e96fb89c0ae0d7127c3f12a31bc32"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/28d1f6aa14f5924e36602b7a31c9141d34de0b9c"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/61f277bf35f533b602984f0e55900111fe52f31a"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/6db7f0ba365786304558db6a3d52013ae176e03e"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/9584ab6283721e5aab485c79bd06c2f78d89e55c"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/9c97e3b1152d3092581745189f5d2f04c6404ef9"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/cebde6d88e34396c29f2f001d90e921677cc17d6"
}
],
"schema_version": "1.4.0",
"severity": []
}
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.