CVE-2026-64256
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
25/07/2026
Last modified:
30/07/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
xfs: don&#39;t wrap around quota ids in dqiterate<br />
<br />
LOLLM noticed that q_id is an unsigned 32-bit variable. If it happens<br />
to be set to XFS_DQ_ID_MAX due to a filesystem that actually has a dquot<br />
for ID_MAX, then this addition will truncate to zero and the iteration<br />
starts over. Fix this by casting to u64.