CVE-2025-68784: xfs: fix a UAF problem in xattr repair
In the Linux kernel, the following vulnerability has been resolved:
xfs: fix a UAF problem in xattr repair
The xchksetupxattrbuf function can allocate a new value buffer, which means that any reference to ab->value before the call could become a dangling pointer. Fix this by moving an assignment to after the buffer setup.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Compensating control
In the Linux kernel XFS xattr repair code, move the assignment that references ab->value to after the xchk_setup_xattr_buf buffer setup call, preventing a dangling-pointer use-after-free.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68784?
CVE-2025-68784 has been classified with a medium severity due to the potential for use-after-free vulnerabilities in xfs xattr repair.
How do I fix CVE-2025-68784?
To fix CVE-2025-68784, update the Linux kernel to the latest stable version that includes the patch for this vulnerability.
What software is affected by CVE-2025-68784?
CVE-2025-68784 affects the Linux kernel, specifically the xfs file system.
What type of vulnerability is CVE-2025-68784?
CVE-2025-68784 is a use-after-free vulnerability that can lead to potential memory corruption.
Is CVE-2025-68784 publicly disclosed?
Yes, CVE-2025-68784 has been publicly disclosed, and a fix has been made available in newer Linux kernel releases.