Overview
About vulnerability
In the Linux kernel, the following vulnerability has been resolved: xfs: don’t irele after failing to iget in xfs_attri_recover_work xlog_recovery_iget* never set @ip to a valid pointer if they return an error, so this irele will walk off a dangling pointer. Fix that. A flaw was found in the Linux kernel’s XFS filesystem. When recovering attributes, if thexlog_recovery_iget* function fails to obtain a valid pointer, a subsequent irele operation attempts to release an invalid memory address. This dangling pointer issue can be exploited by a local attacker, potentially leading to a system crash and a denial of service (DoS).
Details
KernelCare state
Live-patch status from KernelCare for each operating system.
| Operating system | Status | Covered kernels |
|---|---|---|
| Debian 13 | Planned | — |