CVE-2026-43153

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A problem exists in the XFS filesystem component where the xfs attr leaf hasname() function has a problematic calling convention. The function may return a NULL buffer if xfs attr3 leaf read() fails, a valid buffer when xfs attr3 leaf lookup int() returns -ENOATTR or -EEXIST, or a non-NULL pointer to an already released buffer when xfs attr3 leaf lookup int() fails with other error values. This behavior involving bad pointers can lead to system instability or crashes.

Recommendations As a temporary workaround, restrict operations that trigger the xfs attr leaf hasname() function until a patch is applied. At the moment, there is no information about a newer version that contains a fix for this vulnerability.