PT-2026-26100 · Xfs+1 · Xfs+1

Publicado 2026-01-01 · Atualizado 2026-05-21 · CVE-2026-23250

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.2 through 6.10

Description A flaw exists in the Linux kernel related to the xfs file system. Specifically, the xchk scrub create subord function did not correctly handle error conditions, potentially returning an invalid value instead of NULL. Callers of this function were also not checking for a NULL pointer, leading to potential issues. The corrections were applied to code merged between kernel versions 6.2 and 6.10.

Recommendations Update to a version later than 6.10. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

CWE-253

Identificadores relacionados

BDU:2026-03485

CVE-2026-23250

Produtos afetados

Linux Kernel

Xfs

Referências · 23

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23250.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-23250 · Nota de Segurança
• https://git.kernel.org/stable/c/2b658d1249666cc55af9484dcf5f45ca438d4ecc · Correção
• https://osv.dev/vulnerability/BELL-CVE-2026-23250 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2026-23250 · Aviso do Fabricante
• https://docs.bell-sw.com/security/cves/CVE-2026-23250 · Nota
• https://security-tracker.debian.org/tracker/CVE-2026-23250 · Aviso do Fabricante
• https://git.kernel.org/stable/c/d6f3f7d4dd8a179394cef03c00993d57f5f68601 · Correção
• https://t.me/cveNotify/164427 · Publicação no Telegram
• https://git.kernel.org/stable/c/ca27313fb3f23e4ac18532ede4ec1c7cc5814c4a · Correção
• https://lore.kernel.org/linux-cve-announce/2026031845-CVE-2026-23250-271e@gregkh · Nota
• https://altsp.su/obnovleniya-bezopasnosti · Nota
• https://git.kernel.org/linus/ca27313fb3f23e4ac18532ede4ec1c7cc5814c4a · Nota
• https://access.redhat.com/security/cve/cve-2026-23250 · Nota
• https://twitter.com/CVEnew/status/2034365272266825859 · Publicação no Twitter