CVE-2026-98443

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description An issue exists in the xlog recover iunlink bucket() function within the XFS file system of the Linux kernel. The flaw involves improper cursor and pointer handling during the recovery of iunlink buckets, leading to several technical problems: a Use-After-Free (UAF) condition occurs because prev ip is not nulled after release; a memory leak occurs if the inodegc flush call fails, affecting the ip variable; and the incorrect assignment of prev agino can create loops in the unlinked list where inodes have i prev unlinked set to themselves.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.