CVE-2026-97520

A flaw was found in the Linux kernel's GFS2 (Global File System 2) file system. A local user could exploit this flaw by mounting a specially crafted filesystem image, causing an iterator progression error during quota initialization in the gfs2_quota_init() function. Successful exploitation could lead to a Denial of Service (DoS), resulting in a system crash.

This vulnerability has been rated as having a Low impact because GFS2 is not used in standard installations and triggering the issue requires local access to mount a specially crafted filesystem. The GFS2 cluster filesystem module is only loaded when explicitly configured in clustered storage environments. Consequently, the flaw cannot be exploited remotely and does not compromise system integrity or confidentiality.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.