CVEvulnerability
CVE-2026-43063
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2026-05-05
- Last modified
- 2026-10-19
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 (416baaa9-dc9f-4396-8d5f-8c081fb06d67)
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-416
Description
In the Linux kernel, the following vulnerability has been resolved:
xfs: don't irele after failing to iget in xfs_attri_recover_work
xlog_recovery_iget* never set @ip to a valid pointer if they return
an error, so this irele will walk off a dangling pointer. Fix that.
Affected configurations
• linux linux kernel (>= 6.10 < 6.12.80)
• linux linux kernel (>= 6.13 < 6.18.21)
• linux linux kernel (>= 6.19 < 6.19.11)
• linux linux kernel 7.0
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- https://git.kernel.org/stable/c/40082d08b638485cbaa543dc8087a3d1844d6f08 Patch
- https://git.kernel.org/stable/c/70685c291ef82269180758130394ecdc4496b52c Patch
- https://git.kernel.org/stable/c/a1a5df1038f0b3c560d204270373621a4e622808 Patch
- https://git.kernel.org/stable/c/b5c5a50c2f513d4a13a6763564a07b470e69cc5a Patch