AZL-85845
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-85845.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-85845
- Upstream
- Published
- 2026-05-06T12:16:33Z
- Modified
- 2026-08-30T05:26:50Z
- Summary
- CVE-2026-43153 affecting package kernel 6.6.150.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
xfs: remove xfsattrleaf_hasname
The calling convention of xfsattrleafhasname() is problematic, because it returns a NULL buffer when xfsattr3leafread fails, a valid buffer when xfsattr3leaflookupint returns -ENOATTR or -EEXIST, and a non-NULL buffer pointer for an already released buffer when xfsattr3leaflookupint fails with other error values.
Fix this by simply open coding xfsattrleafhasname in the callers, so that the buffer release code is done by each caller of xfsattr3leafread.
- References