CVE-2026-80536

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the XFS file system where the xlog recover do reg buffer() function fails to properly validate the bounds of a buffer log item's dirty bitmap. During mount-time log recovery, the function uses memcpy() to replay dirty regions into a buffer. Because the destination offset and buffer size are attacker-controlled and only bounded by an ASSERT() (which is removed in production kernels), a crafted image can trigger a slab-out-of-bounds write. This allows for the corruption of adjacent kernel heap memory when a malicious filesystem image is mounted.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.