---
id: CVE-2026-97546
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  xfs: don't spin forever on zero-length dirents when salvaging them

  LOLLM noticed that xrep_dir_recover_data can spin forever if it
  encounters an unused dirent that cla…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  xfs: don't spin forever on zero-length dirents when salvaging them

  LOLLM noticed that xrep_dir_recover_data can spin forever if it
  encounters an unused dirent that cla…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= b1991ee3e7cf852e95a3498801303cfbb4468681 <
    5442f0c56445618544a801fb4dae35aed87a1aaa
  - >-
    Linux >= b1991ee3e7cf852e95a3498801303cfbb4468681 <
    08754ebfa5c28e8d57316b1bd7a5a921a5e2e762
  - >-
    Linux >= b1991ee3e7cf852e95a3498801303cfbb4468681 <
    a455c83ce5dc1a2da33b1b84253d298372a8dfbd
  - >-
    Linux >= b1991ee3e7cf852e95a3498801303cfbb4468681 <
    9f84792b40d0c96833341602144574bf0bd14a6a
  - Linux 6.10
published: '2026-09-25'
updated: '2026-09-25'
sourceUpdated: '2026-09-25T11:17:04.963'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-97546'
references:
  - url: 'https://git.kernel.org/stable/c/08754ebfa5c28e8d57316b1bd7a5a921a5e2e762'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/5442f0c56445618544a801fb4dae35aed87a1aaa'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/9f84792b40d0c96833341602144574bf0bd14a6a'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/a455c83ce5dc1a2da33b1b84253d298372a8dfbd'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-25T11:06:38.920Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

xfs: don't spin forever on zero-length dirents when salvaging them

LOLLM noticed that xrep_dir_recover_data can spin forever if it
encounters an unused dirent that claims to have length zero.  Fix that,
and prevent the same thing from happening with a zero-length entry.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.