CVE-2026-80533

kernel: xfs: don't walk off the end of a null sc->sa.agi_bp in AGI repair

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · August 26, 2026

Updated · October 30, 2026

Description

A flaw was found in the Linux kernel's XFS filesystem. This vulnerability occurs during the Allocation Group Information (AGI) repair process, specifically in the xrep_iunlink_walk_ondisk_bucket function. If the buffer verifier fails, a null pointer dereference can occur when attempting to rebuild unlinked inode lists, potentially leading to a system crash and a Denial of Service (DoS).

Statement

This vulnerability is rated as having a Low impact because triggering the condition requires initiating online filesystem repair routines on corrupted filesystem structures, limiting the risk to a local denial of service. Furthermore, the affected online metadata repair code is not present in supported Red Hat Enterprise Linux releases.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476 · NULL Pointer Dereference