CVE-2026-43153
- Source
- https://cve.org/CVERecord?id=CVE-2026-43153
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-43153.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2026-43153
- Downstream
- Related
- Published
- 2026-05-06T11:27:34.446Z
- Modified
- 2026-06-02T18:29:20.132995031Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- xfs: remove xfs_attr_leaf_hasname
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
xfs: remove xfsattrleaf_hasname
The calling convention of xfsattrleafhasname() is problematic, because it returns a NULL buffer when xfsattr3leafread fails, a valid buffer when xfsattr3leaflookupint returns -ENOATTR or -EEXIST, and a non-NULL buffer pointer for an already released buffer when xfsattr3leaflookupint fails with other error values.
Fix this by simply open coding xfsattrleafhasname in the callers, so that the buffer release code is done by each caller of xfsattr3leafread.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43153.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/stable/c/2fbc8421d1db102c0e5458607e042a23a03648b1
- https://git.kernel.org/stable/c/3a65ea768b8094e4699e72f9ab420eb9e0f3f568
- https://git.kernel.org/stable/c/457121c01f609b9934addbb04d5c1ef638c71c61
- https://git.kernel.org/stable/c/530082df991903f3330354e99e0cb7b05debfa86
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43153.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-43153
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced07120f1abdff80f3d1351f733661abe28d609535Fixed2fbc8421d1db102c0e5458607e042a23a03648b1Fixed457121c01f609b9934addbb04d5c1ef638c71c61Fixed530082df991903f3330354e99e0cb7b05debfa86Fixed3a65ea768b8094e4699e72f9ab420eb9e0f3f568