Riskcovery

CVE-2026-43063

xfs: don't irele after failing to iget in xfs_attri_recover_work

State
Published
Severity
7.8 High
Published
May 5, 2026
Updated
Oct 19, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

xfs: don't irele after failing to iget in xfs_attri_recover_work

xlog_recovery_iget* never set @ip to a valid pointer if they return an error, so this irele will walk off a dangling pointer. Fix that.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HLinux

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • ae673f534a30976ce5e709c4535a59c12b786ef3 to before b5c5a50c2f513d4a13a6763564a07b470e69cc5aAffected
  • ae673f534a30976ce5e709c4535a59c12b786ef3 to before a1a5df1038f0b3c560d204270373621a4e622808Affected
  • ae673f534a30976ce5e709c4535a59c12b786ef3 to before 40082d08b638485cbaa543dc8087a3d1844d6f08Affected
  • ae673f534a30976ce5e709c4535a59c12b786ef3 to before 70685c291ef82269180758130394ecdc4496b52cAffected
LinuxLinux
  • 6.10Affected
  • before 6.10Not affected
  • 6.12.80 through 6.12.*Not affected
  • 6.18.21 through 6.18.*Not affected
  • 6.19.11 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.