CVE-2026-64187

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A null-pointer dereference exists in the XFS file system recovery parser. When processing a crafted log where the first operation of a transaction is a bare transaction header, the xlog recover add to trans() function may add an item without a region, resulting in ri buf being NULL. Subsequently, the xlog recover reorder trans() function calls ITEM TYPE(), which attempts to read from the NULL ri buf, leading to a system fault.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.