Bug 2507066 (CVE-2026-64256) - CVE-2026-64256 kernel: xfs: don't wrap around quota ids in dqiterate
Summary: CVE-2026-64256 kernel: xfs: don't wrap around quota ids in dqiterate
Keywords:
Status: NEW
Alias: CVE-2026-64256
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-07-25 10:03 UTC by OSIDB Bzimport
Modified: 2026-07-30 10:09 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-07-25 10:03:14 UTC 
In the Linux kernel, the following vulnerability has been resolved:

xfs: don't wrap around quota ids in dqiterate

LOLLM noticed that q_id is an unsigned 32-bit variable.  If it happens
to be set to XFS_DQ_ID_MAX due to a filesystem that actually has a dquot
for ID_MAX, then this addition will truncate to zero and the iteration
starts over.  Fix this by casting to u64.
Comment 1 Mauro Matteo Cascella 2026-07-30 10:07:02 UTC 
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2026072553-CVE-2026-64256-643b@gregkh/T
Note You need to log in before you can comment on or make changes to this bug.