Riskcovery

CVE-2026-80531

xfs: avoid UAF on sc->tempip in xrep_tempfile_create

State
Published
Severity
7.8 High
Published
Aug 26, 2026
Updated
Aug 27, 2026
Reserved
Aug 26, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

xfs: avoid UAF on sc->tempip in xrep_tempfile_create

LOLLM noticed a potential UAF if the tempfile creation code fails after it set sc->tempip. Fix that.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 84c14ee39dd388d73054181c70b3f42af7ddc238 to before 08a20776ce33a2a52d856911e447c59424f0465aAffected
  • 84c14ee39dd388d73054181c70b3f42af7ddc238 to before cd1f876d1bc2e94f271e07c606cacd85b109108aAffected
  • 84c14ee39dd388d73054181c70b3f42af7ddc238 to before 96246a3200d32a43766152e56bc7ae2d93604d74Affected
  • 84c14ee39dd388d73054181c70b3f42af7ddc238 to before 0c88e10d12de9ca7cbed1467bb1b52310101bff8Affected
LinuxLinux
  • 6.10Affected
  • before 6.10Not affected
  • 6.12.105 through 6.12.*Not affected
  • 6.18.46 through 6.18.*Not affected
  • 7.1.10 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.