vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-43063

xfs: don't irele after failing to iget in xfs_attri_recover_work

HIGH
7.8
CVSS Score
Published: May 5, 2026 at 03:23 PM UTC
Updated: October 19, 2026 at 08:18 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.8
Exploit prediction
EPSS 0.1%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: xfs: don't irele after failing to iget in xfs_attri_recover_work xlog_recovery_iget* never set @ip to a valid pointer if they return an error, so this irele will walk off a dangling pointer. Fix that.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
6.10 ≤ v < 6.12.806.13 ≤ v < 6.18.216.19 ≤ v < 6.19.116.107.07.0 rc17.0 rc27.0 rc37.0 rc47.0 rc5ae673f534a30976ce5e709c4535a59c12b786ef3
Vendor states this is fixed in 40082d08b638485cbaa543dc8087a3d1844d6f08 (fixed)
Vendor states this is fixed in 70685c291ef82269180758130394ecdc4496b52c (fixed)
Vendor states this is fixed in a1a5df1038f0b3c560d204270373621a4e622808 (fixed)
Vendor states this is fixed in b5c5a50c2f513d4a13a6763564a07b470e69cc5a (fixed)
Vendor states this is fixed in 6.10 (unaffected)
Vendor states this is fixed in 6.12.80 (unaffected)
Vendor states this is fixed in 6.18.21 (unaffected)
Vendor states this is fixed in 6.19.11 (unaffected)
Vendor states this is fixed in 7.0 (unaffected)

References (4)

Patch
Source: cverecord
https://git.kernel.org/stable/c/b5c5a50c2f513d4a13a6763564a07b470e69cc5a
Patch
Source: cverecord
https://git.kernel.org/stable/c/a1a5df1038f0b3c560d204270373621a4e622808
Patch
Source: cverecord
https://git.kernel.org/stable/c/40082d08b638485cbaa543dc8087a3d1844d6f08
Patch
Source: cverecord
https://git.kernel.org/stable/c/70685c291ef82269180758130394ecdc4496b52c

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.8HIGHLinux
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfoCWE-416

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card