Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-43153

In the Linux kernel, the following vulnerability has been resolved: xfs: remove xfs_attr_leaf_hasname The calling convention of xfs_attr_leaf_hasname() is problematic, because it returns a NULL buffer when xfs_attr3_leaf_read fails, a valid buffer when xfs_attr3_leaf_lookup_int returns -ENOATTR or -EEXIST, and a non-NULL buffer pointer for an already released buffer when xfs_attr3_leaf_lookup_int fails with other error values. Fix this by simply open coding xfs_attr_leaf_hasname in the caller
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:92788c749332dde3199a96057a2b6d0596eec882baa280d538483d4621976bbe
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/xfs/libxfs/xfs_attr.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.9"},{"lessThan":"5.9","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.75","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.16","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.6","versionType":"semver"},{"lessThan…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:e032ebcc79d59ffa684c6510015f72c2c9442d9845ead7aae651af5796d5d6fa · sha256:a5478b12c9184360… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/xfs/libxfs/xfs_attr.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"2fbc8421d1db102c0e5458607e042a23a03648b1","status":"affected","version":"07120f1abdff80f3d1351f733661abe28d609535","versionType":"git"},{"lessThan":"457121c01f609b9934addbb04d5c1ef638c71c61","status":"affected","version":"07120f1abdff80f3d1351f733661abe28d609535","versionType":"git"},{"lessThan":"530082df991903f3330354e99e0cb7b05debfa86","status":"affected","version":"07120f1abdff80f3d1351…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:e032ebcc79d59ffa684c6510015f72c2c9442d9845ead7aae651af5796d5d6fa · sha256:a5478b12c9184360… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["fs/xfs/libxfs/xfs_attr.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.9"},{"lessThan":"5.9","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.75","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.16","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.6","versionType":"semver"},{"lessThan…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:e032ebcc79d59ffa684c6510015f72c2c9442d9845ead7aae651af5796d5d6fa · sha256:a5478b12c9184360… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/xfs/libxfs/xfs_attr.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"2fbc8421d1db102c0e5458607e042a23a03648b1","status":"affected","version":"07120f1abdff80f3d1351f733661abe28d609535","versionType":"git"},{"lessThan":"457121c01f609b9934addbb04d5c1ef638c71c61","status":"affected","version":"07120f1abdff80f3d1351f733661abe28d609535","versionType":"git"},{"lessThan":"530082df991903f3330354e99e0cb7b05debfa86","status":"affected","version":"07120f1abdff80f3d1351…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:e032ebcc79d59ffa684c6510015f72c2c9442d9845ead7aae651af5796d5d6fa · sha256:a5478b12c9184360… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:e032ebcc79d59ffa684c6510015f72c2c9442d9845ead7aae651af5796d5d6fa · sha256:a5478b12c9184360… · /containers/cna/metrics/0/cvssV3_1

Source references

4 source assertions
{"url":"https://git.kernel.org/stable/c/2fbc8421d1db102c0e5458607e042a23a03648b1"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e032ebcc79d59ffa684c6510015f72c2c9442d9845ead7aae651af5796d5d6fa · sha256:a5478b12c9184360… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/3a65ea768b8094e4699e72f9ab420eb9e0f3f568"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e032ebcc79d59ffa684c6510015f72c2c9442d9845ead7aae651af5796d5d6fa · sha256:a5478b12c9184360… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/457121c01f609b9934addbb04d5c1ef638c71c61"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e032ebcc79d59ffa684c6510015f72c2c9442d9845ead7aae651af5796d5d6fa · sha256:a5478b12c9184360… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/530082df991903f3330354e99e0cb7b05debfa86"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e032ebcc79d59ffa684c6510015f72c2c9442d9845ead7aae651af5796d5d6fa · sha256:a5478b12c9184360… · /containers/cna/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer