Riskcovery

CVE-2025-68784

xfs: fix a UAF problem in xattr repair

State
Published
Severity
Not scored
Published
Jan 13, 2026
Updated
May 11, 2026
Reserved
Dec 24, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

xfs: fix a UAF problem in xattr repair

The xchk_setup_xattr_buf function can allocate a new value buffer, which means that any reference to ab->value before the call could become a dangling pointer. Fix this by moving an assignment to after the buffer setup.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e47dcf113ae348678143cc935a1183059c02c9ad to before 1e2d3aa19c7962b9474b22893160cb460494c45fAffected
  • e47dcf113ae348678143cc935a1183059c02c9ad to before d29ed9ff972afe17c215cab171761d7a15d7063fAffected
  • e47dcf113ae348678143cc935a1183059c02c9ad to before 5990fd756943836978ad184aac980e2b36ab7e01Affected
LinuxLinux
  • 6.10Affected
  • before 6.10Not affected
  • 6.12.64 through 6.12.*Not affected
  • 6.18.3 through 6.18.*Not affected
  • 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.