Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-68784

xfs: fix a UAF problem in xattr repair

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: xfs: fix a UAF problem in xattr repair The xchk_setup_xattr_buf function can allocate a new value buffer, which means that any reference to ab->value before the call could become a dangling pointer. Fix this by moving an assignment to after the buffer setup.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e47dcf113ae348678143cc935a1183059c02c9ad to < 1e2d3aa19c7962b9474b22893160cb460494c45faffected
  • e47dcf113ae348678143cc935a1183059c02c9ad to < d29ed9ff972afe17c215cab171761d7a15d7063faffected
  • e47dcf113ae348678143cc935a1183059c02c9ad to < 5990fd756943836978ad184aac980e2b36ab7e01affected

Linux Linux

Default version status: affected

  • 6.10affected
  • 0 to < 6.10unaffected
  • 6.12.64 to ≤ 6.12.*unaffected
  • 6.18.3 to ≤ 6.18.*unaffected
  • 6.19 to ≤ *unaffected

References