---
id: CVE-2026-43063
title: 'xfs: don''t irele after failing to iget in xfs_attri_recover_work'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  xfs: don't irele after failing to iget in xfs_attri_recover_work

  xlog_recovery_iget* never set @ip to a valid pointer if they return
  an error, so this irele will walk …
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= ae673f534a30976ce5e709c4535a59c12b786ef3 <
    b5c5a50c2f513d4a13a6763564a07b470e69cc5a
  - >-
    Linux >= ae673f534a30976ce5e709c4535a59c12b786ef3 <
    a1a5df1038f0b3c560d204270373621a4e622808
  - >-
    Linux >= ae673f534a30976ce5e709c4535a59c12b786ef3 <
    40082d08b638485cbaa543dc8087a3d1844d6f08
  - >-
    Linux >= ae673f534a30976ce5e709c4535a59c12b786ef3 <
    70685c291ef82269180758130394ecdc4496b52c
  - Linux 6.10
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-16T15:14:14.697660Z'
published: '2026-05-05'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T15:20:31.089Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-43063'
references:
  - url: 'https://git.kernel.org/stable/c/b5c5a50c2f513d4a13a6763564a07b470e69cc5a'
  - url: 'https://git.kernel.org/stable/c/a1a5df1038f0b3c560d204270373621a4e622808'
  - url: 'https://git.kernel.org/stable/c/40082d08b638485cbaa543dc8087a3d1844d6f08'
  - url: 'https://git.kernel.org/stable/c/70685c291ef82269180758130394ecdc4496b52c'
tags:
  - cve.org
epss: 0.00186
epssPercentile: 0.07705
ingestedAt: '2026-10-16T17:24:46.681Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

xfs: don't irele after failing to iget in xfs_attri_recover_work

xlog_recovery_iget* never set @ip to a valid pointer if they return
an error, so this irele will walk off a dangling pointer.  Fix that.

## Affected

- `Linux >= ae673f534a30976ce5e709c4535a59c12b786ef3 < b5c5a50c2f513d4a13a6763564a07b470e69cc5a`
- `Linux >= ae673f534a30976ce5e709c4535a59c12b786ef3 < a1a5df1038f0b3c560d204270373621a4e622808`
- `Linux >= ae673f534a30976ce5e709c4535a59c12b786ef3 < 40082d08b638485cbaa543dc8087a3d1844d6f08`
- `Linux >= ae673f534a30976ce5e709c4535a59c12b786ef3 < 70685c291ef82269180758130394ecdc4496b52c`
- `Linux 6.10`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.