CVE-2025-68784

xfs: fix a UAF problem in xattr repair

published January 13, 2026

CVSS
—
EPSS
0%
Percentile
9.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

xfs: fix a UAF problem in xattr repair

The xchk_setup_xattr_buf function can allocate a new value buffer, which

means that any reference to ab->value before the call could become a

dangling pointer. Fix this by moving an assignment to after the buffer

setup.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00199 · 9.2th percentile
Published
2026-01-13T15:28Z
EPSS history
Timeline
  • 13 JAN 15:28Z
    xfs: fix a UAF problem in xattr repair
    cvelistv5