CVE-2026-23223: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: xfs: fix UAF in xchk_btree_check_block_owner We cannot dereference bs->cur when trying to determine if bs->cur aliases bs->sc->sa.{bno,rmap}_cur after the latter has been freed. Fix this by sampling before type before any freeing could happen. The correct temporal ordering was broken when we removed xfs_btnum_t.

Засегнати продукти

• Linux Linux: ec793e690f801d97a7ae2a0d429fea1fee4d44aa преди 1d411278dda293a507cb794db7d9ed3511c685c6; ec793e690f801d97a7ae2a0d429fea1fee4d44aa преди ed82e7949f5cac3058f4100f3cd670531d41a266; ec793e690f801d97a7ae2a0d429fea1fee4d44aa преди ba5264610423d9653aa36920520902d83841bcfd; ec793e690f801d97a7ae2a0d429fea1fee4d44aa преди 1c253e11225bc5167217897885b85093e17c2217
• Linux Linux: 6.9; преди 6.9; 6.12.72 до 6.12.*; 6.18.11 до 6.18.*; 6.19.1 до 6.19.*; 7.0 до *

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99268
• CVE-2026-99266
• CVE-2026-99267

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-23223
• https://nvd.nist.gov/vuln/detail/CVE-2026-23223
• https://git.kernel.org/stable/c/1d411278dda293a507cb794db7d9ed3511c685c6
• https://git.kernel.org/stable/c/ed82e7949f5cac3058f4100f3cd670531d41a266
• https://git.kernel.org/stable/c/ba5264610423d9653aa36920520902d83841bcfd
• https://git.kernel.org/stable/c/1c253e11225bc5167217897885b85093e17c2217