CVE-2026-80533xfs: don't walk off the end of a null sc->sa.agi_bp in AGI repair
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: xfs: don't walk off the end of a null sc->sa.agi_bp in AGI repair LOLLM noticed a longstanding bug where xrep_iunlink_walk_ondisk_bucket tries to walk ragi->sc->sa.agi_bp to rebuild the unlinked inode lists. Unfortunately, it's possible for agi_bp to be null if the buffer verifier fails, so we have to use ragi->agi_bp (which skips verifier checks) instead.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 26, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from ab97f4b1c030750f2475bf4da8a9554d02206640 before 43b4ecbc948a2e441804c9d7b772deb6b2e44e3d; from ab97f4b1c030750f2475bf4da8a9554d02206640 before c36d7f68f1c2e7e528ad11044a0bd6a3016a6a03; from ab97f4b1c030750f2475bf4da8a9554d02206640 before a6cfd0e4bb1e5f4dd2a67fa99eab36bda47cf081; from ab97f4b1c030750f2475bf4da8a9554d02206640 before 1e96a00e0d3a00be6e4f368b2f18e2d345f813ce | CNA record |
References
- https://git.kernel.org/stable/c/43b4ecbc948a2e441804c9d7b772deb6b2e44e3d
- https://git.kernel.org/stable/c/c36d7f68f1c2e7e528ad11044a0bd6a3016a6a03
- https://git.kernel.org/stable/c/a6cfd0e4bb1e5f4dd2a67fa99eab36bda47cf081
- https://git.kernel.org/stable/c/1e96a00e0d3a00be6e4f368b2f18e2d345f813ce
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.