CVE-2026-43153

xfs: remove xfs_attr_leaf_hasname

State: Published
Severity: 7.8 High
Published: May 6, 2026
Updated: Oct 30, 2026
Reserved: May 1, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

xfs: remove xfs_attr_leaf_hasname

The calling convention of xfs_attr_leaf_hasname() is problematic, because it returns a NULL buffer when xfs_attr3_leaf_read fails, a valid buffer when xfs_attr3_leaf_lookup_int returns -ENOATTR or -EEXIST, and a non-NULL buffer pointer for an already released buffer when xfs_attr3_leaf_lookup_int fails with other error values.

Fix this by simply open coding xfs_attr_leaf_hasname in the callers, so that the buffer release code is done by each caller of xfs_attr3_leaf_read.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

CWE-416 Use After Free

Affected Products

Product	Versions
LinuxLinux	07120f1abdff80f3d1351f733661abe28d609535 to before dfb3474230d392f809359f15aeaa9be4b1798199Affected 07120f1abdff80f3d1351f733661abe28d609535 to before 759e44a6cba8e81d945ffc269a326ec39e7f54f5Affected 07120f1abdff80f3d1351f733661abe28d609535 to before 2fbc8421d1db102c0e5458607e042a23a03648b1Affected 07120f1abdff80f3d1351f733661abe28d609535 to before 457121c01f609b9934addbb04d5c1ef638c71c61Affected 07120f1abdff80f3d1351f733661abe28d609535 to before 530082df991903f3330354e99e0cb7b05debfa86Affected 07120f1abdff80f3d1351f733661abe28d609535 to before 3a65ea768b8094e4699e72f9ab420eb9e0f3f568Affected
LinuxLinux	5.9Affected before 5.9Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.75 through 6.12.Not affected 6.18.16 through 6.18.Not affected 6.19.6 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

07120f1abdff80f3d1351f733661abe28d609535 to before dfb3474230d392f809359f15aeaa9be4b1798199Affected
07120f1abdff80f3d1351f733661abe28d609535 to before 759e44a6cba8e81d945ffc269a326ec39e7f54f5Affected
07120f1abdff80f3d1351f733661abe28d609535 to before 2fbc8421d1db102c0e5458607e042a23a03648b1Affected
07120f1abdff80f3d1351f733661abe28d609535 to before 457121c01f609b9934addbb04d5c1ef638c71c61Affected
07120f1abdff80f3d1351f733661abe28d609535 to before 530082df991903f3330354e99e0cb7b05debfa86Affected
07120f1abdff80f3d1351f733661abe28d609535 to before 3a65ea768b8094e4699e72f9ab420eb9e0f3f568Affected

LinuxLinux

5.9Affected
before 5.9Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.75 through 6.12.*Not affected
6.18.16 through 6.18.*Not affected
6.19.6 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.