Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-80591

f2fs: fix listxattr handling of corrupted xattr entries

Description

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix listxattr handling of corrupted xattr entries Validate the xattr entry before reading its fields in f2fs_listxattr(). Return -EFSCORRUPTED when the entry is outside the valid xattr storage area instead of returning a successful partial result.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 688078e7f36c293dae25b338ddc9e0a2790f6e06 to < 7dfac47e4189692f35230f3064acf2540e6d75feaffected
  • 688078e7f36c293dae25b338ddc9e0a2790f6e06 to < c8a10f174316e80d577e6549099b71a7a2111f3faffected
  • 688078e7f36c293dae25b338ddc9e0a2790f6e06 to < dfa4891c27bccbd83d511a065721e85621f275a1affected
  • 688078e7f36c293dae25b338ddc9e0a2790f6e06 to < 2770041f34b52334ea63351ffb1cc2007a9de46eaffected
  • 688078e7f36c293dae25b338ddc9e0a2790f6e06 to < 7dd01f7d0291583e3e5420c95c7d584e114899bdaffected
  • 688078e7f36c293dae25b338ddc9e0a2790f6e06 to < ec9f79c8d5b28a928e65b67cd138c841571cf502affected
  • 688078e7f36c293dae25b338ddc9e0a2790f6e06 to < 3c0dbfecd859fd02fe9008f33a83146102ccd9baaffected
  • 688078e7f36c293dae25b338ddc9e0a2790f6e06 to < 5ef5bc304f23c3fe255d4936472378dcb74d0e94affected
  • ae811cecbbb231f11a84acaf74baca1283b964c7affected
  • ed523cbd4a6594edf123dc03ec9d70ea4f793671affected
  • 5811f24abd27a8a0791c6909c6ff803659060c84affected
  • 4.14.181 to < 4.15affected
  • 4.19.119 to < 4.20affected
  • 5.4.36 to < 5.5affected

Linux Linux

Default version status: affected

  • 5.5affected
  • 0 to < 5.5unaffected
  • 5.10.261 to ≤ 5.10.*unaffected
  • 5.15.212 to ≤ 5.15.*unaffected
  • 6.1.178 to ≤ 6.1.*unaffected
  • 6.6.145 to ≤ 6.6.*unaffected
  • 6.12.96 to ≤ 6.12.*unaffected
  • 6.18.39 to ≤ 6.18.*unaffected
  • 7.1.5 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References