Vulnerability in Linux

CVE-2026-80591

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix listxattr handling of corrupted xattr entries Validate the xattr entry before reading its fields in f2fs_listxattr(). Return -EFSCORRUPTED when the entry is outside the valid xattr storage area instead of returning a successful partial result.

EPSS: 0.002 (7.2th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 5.5, 5811f24abd27a8a0791c6909c6ff803659060c84, ae811cecbbb231f11a84acaf74baca1283b964c7

References