{"id":"CVE-2026-43063","title":"xfs: don't irele after failing to iget in xfs_attri_recover_work","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: don't irele after failing to iget in xfs_attri_recover_work\n\nxlog_recovery_iget* never set @ip to a valid pointer if they return\nan error, so this irele will walk …","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvssSource":"cna","vendor":"Linux","product":"Linux","affected":["Linux >= ae673f534a30976ce5e709c4535a59c12b786ef3 < b5c5a50c2f513d4a13a6763564a07b470e69cc5a","Linux >= ae673f534a30976ce5e709c4535a59c12b786ef3 < a1a5df1038f0b3c560d204270373621a4e622808","Linux >= ae673f534a30976ce5e709c4535a59c12b786ef3 < 40082d08b638485cbaa543dc8087a3d1844d6f08","Linux >= ae673f534a30976ce5e709c4535a59c12b786ef3 < 70685c291ef82269180758130394ecdc4496b52c","Linux 6.10"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-16T15:14:14.697660Z"},"published":"2026-05-05","updated":"2026-10-16","sourceUpdated":"2026-10-16T15:20:31.089Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-43063","references":[{"url":"https://git.kernel.org/stable/c/b5c5a50c2f513d4a13a6763564a07b470e69cc5a"},{"url":"https://git.kernel.org/stable/c/a1a5df1038f0b3c560d204270373621a4e622808"},{"url":"https://git.kernel.org/stable/c/40082d08b638485cbaa543dc8087a3d1844d6f08"},{"url":"https://git.kernel.org/stable/c/70685c291ef82269180758130394ecdc4496b52c"}],"tags":["cve.org"],"epss":0.00186,"epssPercentile":0.07705,"ingestedAt":"2026-10-16T17:24:46.681Z","slug":"CVE-2026-43063","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nxfs: don't irele after failing to iget in xfs_attri_recover_work\n\nxlog_recovery_iget* never set @ip to a valid pointer if they return\nan error, so this irele will walk off a dangling pointer.  Fix that.\n\n## Affected\n\n- `Linux >= ae673f534a30976ce5e709c4535a59c12b786ef3 < b5c5a50c2f513d4a13a6763564a07b470e69cc5a`\n- `Linux >= ae673f534a30976ce5e709c4535a59c12b786ef3 < a1a5df1038f0b3c560d204270373621a4e622808`\n- `Linux >= ae673f534a30976ce5e709c4535a59c12b786ef3 < 40082d08b638485cbaa543dc8087a3d1844d6f08`\n- `Linux >= ae673f534a30976ce5e709c4535a59c12b786ef3 < 70685c291ef82269180758130394ecdc4496b52c`\n- `Linux 6.10`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}