CVE-2026-23251

xfs: only call xf{array,blob}_destroy if we have a valid pointer

published March 18, 2026

CVSS
—
EPSS
0%
Percentile
2.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

xfs: only call xf{array,blob}_destroy if we have a valid pointer

Only call the xfarray and xfblob destructor if we have a valid pointer,

and be sure to null out that pointer afterwards. Note that this patch

fixes a large number of commits, most of which were merged between 6.9

and 6.10.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00127 · 2.1th percentile
Published
2026-03-18T17:01Z
EPSS history
Timeline
  • 18 MAR 17:01Z
    xfs: only call xf{array,blob}_destroy if we have a valid pointer
    cvelistv5