CVE-2025-68784: xfs: fix a UAF problem in xattr repair
In the Linux kernel, the following vulnerability has been resolved:
xfs: fix a UAF problem in xattr repair
The xchksetupxattrbuf function can allocate a new value buffer, which means that any reference to ab->value before the call could become a dangling pointer. Fix this by moving an assignment to after the buffer setup.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68784?
CVE-2025-68784 has been classified with a medium severity due to the potential for use-after-free vulnerabilities in xfs xattr repair.
How do I fix CVE-2025-68784?
To fix CVE-2025-68784, update the Linux kernel to the latest stable version that includes the patch for this vulnerability.
What software is affected by CVE-2025-68784?
CVE-2025-68784 affects the Linux kernel, specifically the xfs file system.
What type of vulnerability is CVE-2025-68784?
CVE-2025-68784 is a use-after-free vulnerability that can lead to potential memory corruption.
Is CVE-2025-68784 publicly disclosed?
Yes, CVE-2025-68784 has been publicly disclosed, and a fix has been made available in newer Linux kernel releases.