CVE-2026-43153: xfs: remove xfs_attr_leaf_hasname
In the Linux kernel, the following vulnerability has been resolved:
xfs: remove xfsattrleafhasname
The calling convention of xfsattrleafhasname() is problematic, because it returns a NULL buffer when xfsattr3leafread fails, a valid buffer when xfsattr3leaflookupint returns -ENOATTR or -EEXIST, and a non-NULL buffer pointer for an already released buffer when xfsattr3leaflookupint fails with other error values.
Fix this by simply open coding xfsattrleafhasname in the callers, so that the buffer release code is done by each caller of xfsattr3leafread.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43153?
CVE-2026-43153 has a severity rating of high, with a CVSS score of 7.8.
How do I fix CVE-2026-43153?
To remediate CVE-2026-43153, apply the available patch as recommended in the Linux kernel updates.
What potential impact does CVE-2026-43153 have on systems?
CVE-2026-43153 could lead to information disclosure or data corruption in affected systems.
Which versions of the Linux kernel are affected by CVE-2026-43153?
CVE-2026-43153 affects specific versions of the Linux kernel that include the XFS file system.
When was CVE-2026-43153 published?
CVE-2026-43153 was published on May 6, 2026.