Critical Vulnerability in Linux Kernel: Set Blocksize Failure in OMFS
Summary
DEBIAN-CVE-2026-97485: In the Linux kernel, the following vulnerability has been resolved: omfs: handle set_blocksize failures omfs uses buffer_heads, which don't handle block size > PAGE_SIZE well. Affects linux versions 6.1.106-1 – 7.2~rc7-1~exp1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. It supports a wide range of functionalities, including process management, memory management, and device control. The kernel is essential for system stability and performance. This vulnerability specifically affects the OMFS (Object Management File System) component of the Linux kernel, which is designed to handle object storage efficiently. However, it has a flaw that can lead to critical failures when handling block sizes larger than PAGE_SIZE.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the OMFS that arises from improper handling of block size settings. The OMFS utilizes buffer_heads, which are not equipped to manage block sizes exceeding PAGE_SIZE. This limitation can trigger a critical error during the mounting process, leading to a BUG_ON condition when the offset is greater than or equal to the folio size. The implications of this vulnerability can result in system crashes or data loss, making it a significant concern for users relying on the affected kernel versions.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. However, users are advised to avoid using block sizes larger than PAGE_SIZE until the patch is applied.
Conclusion
The vulnerability in the Linux kernel's OMFS component poses a significant risk to system stability and data integrity. Users are strongly encouraged to update their kernel to the patched version to mitigate these risks. Utilizing tools like Vulert can help monitor for such vulnerabilities in real-time, ensuring the security of your software.
See every vulnerability recorded for linux →
FAQ
The vulnerability can lead to system crashes or data loss when mounting the OMFS with block sizes larger than PAGE_SIZE.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Yes, a patch is available in version 7.2.6-1 for the ForKy distribution of the Linux kernel.
While there are no specific workarounds, it is advisable to avoid using block sizes larger than PAGE_SIZE until you can apply the patch.
Detailed information can be found in the Debian CVE database and on the Vulert platform.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
