CVE-2026-80591

HighCVSS 7.8/10Last modified Aug 29, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix listxattr handling of corrupted xattr entries

Validate the xattr entry before reading its fields in f2fs_listxattr(). Return -EFSCORRUPTED when the entry is outside the valid xattr storage area instead of returning a successful partial result.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 688078e7f36c293dae25b338ddc9e0a2790f6e06, < 7dfac47e4189692f35230f3064acf2540e6d75fe; >= 688078e7f36c293dae25b338ddc9e0a2790f6e06, < c8a10f174316e80d577e6549099b71a7a2111f3f; >= 688078e7f36c293dae25b338ddc9e0a2790f6e06, < dfa4891c27bccbd83d511a065721e85621f275a1; >= 688078e7f36c293dae25b338ddc9e0a2790f6e06, < 2770041f34b52334ea63351ffb1cc2007a9de46e; >= 688078e7f36c293dae25b338ddc9e0a2790f6e06, < 7dd01f7d0291583e3e5420c95c7d584e114899bd; >= 688078e7f36c293dae25b338ddc9e0a2790f6e06, < ec9f79c8d5b28a928e65b67cd138c841571cf502; >= 688078e7f36c293dae25b338ddc9e0a2790f6e06, < 3c0dbfecd859fd02fe9008f33a83146102ccd9ba; >= 688078e7f36c293dae25b338ddc9e0a2790f6e06, < 5ef5bc304f23c3fe255d4936472378dcb74d0e94; ae811cecbbb231f11a84acaf74baca1283b964c7; ed523cbd4a6594edf123dc03ec9d70ea4f793671; 5811f24abd27a8a0791c6909c6ff803659060c84; >= 4.14.181, < 4.15; >= 4.19.119, < 4.20; >= 5.4.36, < 5.5
LinuxLinux5.5

References

Timeline

Published
Aug 28, 2026
Last modified
Aug 29, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-80592In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: fail early if address range parameters are invalidCVE-2026-805938.4In the Linux kernel, the following vulnerability has been resolved: hwmon: (asus_atk0110) Check package count before accessing element atkCVE-2026-80594In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix potential infinite loop in CDC union descriptor paCVE-2026-80595In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - add response length checks The driver processes respoCVE-2026-805968.4In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - only expose sysfs attributes on control interface WheCVE-2026-80597In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix NULL pointer dereference in initialization TCVE-2026-805987.8In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix out-of-bounds read in decompress_lznt decompress_lznt() doeCVE-2026-805998.1In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: ensure accessible eth_hdr proto field When batadv_getCVE-2026-806009.8In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: acquire ARP hw source only after skb realloc The pskbCVE-2026-806018.8In the Linux kernel, the following vulnerability has been resolved: batman-adv: gw: acquire ethernet header only after skb realloc The pskCVE-2026-80602In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/lbr: Fix kernel address leakage A user-only branch stack CVE-2026-806039.1In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read parse
CVE-2026-80591: High severity, CVSS 7.8 | Vulnix