---
id: CVE-2026-80591
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  f2fs: fix listxattr handling of corrupted xattr entries

  Validate the xattr entry before reading its fields in f2fs_listxattr().
  Return -EFSCORRUPTED when the entry is …
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  f2fs: fix listxattr handling of corrupted xattr entries

  Validate the xattr entry before reading its fields in f2fs_listxattr().
  Return -EFSCORRUPTED when the entry is …
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
published: '2026-08-28'
updated: '2026-08-29'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-80591'
references:
  - url: 'https://git.kernel.org/stable/c/2770041f34b52334ea63351ffb1cc2007a9de46e'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/3c0dbfecd859fd02fe9008f33a83146102ccd9ba'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/5ef5bc304f23c3fe255d4936472378dcb74d0e94'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/7dd01f7d0291583e3e5420c95c7d584e114899bd'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/7dfac47e4189692f35230f3064acf2540e6d75fe'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/c8a10f174316e80d577e6549099b71a7a2111f3f'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/dfa4891c27bccbd83d511a065721e85621f275a1'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/ec9f79c8d5b28a928e65b67cd138c841571cf502'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
epss: 0.00129
epssPercentile: 0.02905
ingestedAt: '2026-08-29T21:42:36.813Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix listxattr handling of corrupted xattr entries

Validate the xattr entry before reading its fields in f2fs_listxattr().
Return -EFSCORRUPTED when the entry is outside the valid xattr storage
area instead of returning a successful partial result.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.