Riskcovery

CVE-2026-23223

xfs: fix UAF in xchk_btree_check_block_owner

State
Published
Severity
Not scored
Published
Feb 18, 2026
Updated
May 11, 2026
Reserved
Jan 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

xfs: fix UAF in xchk_btree_check_block_owner

We cannot dereference bs->cur when trying to determine if bs->cur aliases bs->sc->sa.{bno,rmap}_cur after the latter has been freed. Fix this by sampling before type before any freeing could happen. The correct temporal ordering was broken when we removed xfs_btnum_t.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • ec793e690f801d97a7ae2a0d429fea1fee4d44aa to before 1d411278dda293a507cb794db7d9ed3511c685c6Affected
  • ec793e690f801d97a7ae2a0d429fea1fee4d44aa to before ed82e7949f5cac3058f4100f3cd670531d41a266Affected
  • ec793e690f801d97a7ae2a0d429fea1fee4d44aa to before ba5264610423d9653aa36920520902d83841bcfdAffected
  • ec793e690f801d97a7ae2a0d429fea1fee4d44aa to before 1c253e11225bc5167217897885b85093e17c2217Affected
LinuxLinux
  • 6.9Affected
  • before 6.9Not affected
  • 6.12.72 through 6.12.*Not affected
  • 6.18.11 through 6.18.*Not affected
  • 6.19.1 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.