CVE-2025-68784

Not scored yetLast modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

xfs: fix a UAF problem in xattr repair

The xchk_setup_xattr_buf function can allocate a new value buffer, which means that any reference to ab->value before the call could become a dangling pointer. Fix this by moving an assignment to after the buffer setup.

Metrics

No CVSS score has been published yet.

Affected software

VendorProductVersions
LinuxLinux>= e47dcf113ae348678143cc935a1183059c02c9ad, < 1e2d3aa19c7962b9474b22893160cb460494c45f; >= e47dcf113ae348678143cc935a1183059c02c9ad, < d29ed9ff972afe17c215cab171761d7a15d7063f; >= e47dcf113ae348678143cc935a1183059c02c9ad, < 5990fd756943836978ad184aac980e2b36ab7e01
LinuxLinux6.10

References

Timeline

Published
Jan 13, 2026
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-687857.1In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix middle attribute validation in push_nsh() action CVE-2025-68786In the Linux kernel, the following vulnerability has been resolved: ksmbd: skip lock-range check on equal size to avoid size==0 underflow CVE-2025-68787In the Linux kernel, the following vulnerability has been resolved: netrom: Fix memory leak in nr_sendmsg() syzbot reported a memory leak CVE-2025-68788In the Linux kernel, the following vulnerability has been resolved: fsnotify: do not generate ACCESS/MODIFY events on child for special filCVE-2025-68798.8A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been rated as critical. This issue affects some unknownCVE-2025-68790In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix double unregister of HCA_PORTS component Clear hca_devcoCVE-2025-68791In the Linux kernel, the following vulnerability has been resolved: fuse: missing copy_finish in fuse-over-io-uring argument copies Fix a CVE-2025-687927.8In the Linux kernel, the following vulnerability has been resolved: tpm2-sessions: Fix out of range indexing in name_size 'name_size' doesCVE-2025-687937.8In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix a job->pasid access race in gpu recovery Avoid a possiCVE-2025-687949.8In the Linux kernel, the following vulnerability has been resolved: iomap: adjust read range correctly for non-block-aligned positions iomCVE-2025-687957.8In the Linux kernel, the following vulnerability has been resolved: ethtool: Avoid overflowing userspace buffer on stats query The ethtoolCVE-2025-68796In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid updating zero-sized extent in extent cache As syzbo