CVE-2026-23251

A NULL pointer dereference vulnerability was found in the Linux kernel's XFS filesystem. The xfarray_destroy() and xfblob_destroy() functions are called without checking if the pointer is valid. When these destructors are invoked on NULL pointers during cleanup paths, a kernel crash occurs. The fix adds NULL checks before calling the destructors and nullifies the pointers afterward to prevent double-free issues.

This flaw affects XFS filesystems in kernels between 6.9 and 6.10 where the xfarray and xfblob infrastructure was introduced for online repair functionality. The NULL pointer dereference occurs in error handling and cleanup paths. While this can cause a kernel crash, exploitation requires triggering specific error conditions in XFS scrub/repair operations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.