Security Advisory

CVE-2026-64256

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-25 08:49:08
Last updated 2026-07-25 08:49:08
Assigner Linux
CVSS score not scored
State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: xfs: don't wrap around quota ids in dqiterate LOLLM noticed that q_id is an unsigned 32-bit variable. If it happens to be set to XFS_DQ_ID_MAX due to a filesystem that actually has a dquot for ID_MAX, then this addition will truncate to zero and the iteration starts over. Fix this by casting to u64.