CVE-2026-80531
xfs: avoid UAF on sc->tempip in xrep_tempfile_create
HIGH
7.8
CVSS Score
Published: August 26, 2026 at 02:37 PM UTC
Updated: August 27, 2026 at 06:30 AM UTC
1 product affected across 1 vendorLinux Kernel
Using Linux by Linux?
Get instant alerts when new vulnerabilities affect Linux - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.8
Exploit prediction
EPSS 0.1%
Description
In the Linux kernel, the following vulnerability has been resolved: xfs: avoid UAF on sc->tempip in xrep_tempfile_create LOLLM noticed a potential UAF if the tempfile creation code fails after it set sc->tempip. Fix that.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
6.10 ≤ v < 6.12.1056.10 ≤ v < 6.18.466.10 ≤ v < 7.1.106.10 ≤ v < 7.26.1084c14ee39dd388d73054181c70b3f42af7ddc238
Vendor states this is fixed in 08a20776ce33a2a52d856911e447c59424f0465a (fixed)
Vendor states this is fixed in 0c88e10d12de9ca7cbed1467bb1b52310101bff8 (fixed)
Vendor states this is fixed in 96246a3200d32a43766152e56bc7ae2d93604d74 (fixed)
Vendor states this is fixed in cd1f876d1bc2e94f271e07c606cacd85b109108a (fixed)
Vendor states this is fixed in 6.10 (unaffected)
Vendor states this is fixed in 6.12.105 (unaffected)
Vendor states this is fixed in 6.18.46 (unaffected)
Vendor states this is fixed in 7.1.10 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)
Remediation
No guide yetNo remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.
References (4)
CVSS
7.8HIGHLinux
Vector?
Quick Info
StatusRECEIVED
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card