CVE-2025-68784 — Expired Pointer Dereference in Linux
Severity
6.4MEDIUM
No vectorEPSS
0.0%
top 93.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 13
Latest updateApr 17
Description
In the Linux kernel, the following vulnerability has been resolved:
xfs: fix a UAF problem in xattr repair
The xchk_setup_xattr_buf function can allocate a new value buffer, which
means that any reference to ab->value before the call could become a
dangling pointer. Fix this by moving an assignment to after the buffer
setup.
Affected Packages7 packages
▶CVEListV5linux/linuxe47dcf113ae348678143cc935a1183059c02c9ad — 1e2d3aa19c7962b9474b22893160cb460494c45f+3
🔴Vulnerability Details
3OSV▶
CVE-2025-68784: In the Linux kernel, the following vulnerability has been resolved: xfs: fix a UAF problem in xattr repair The xchk_setup_xattr_buf function can alloc↗2026-01-13
GHSA▶
GHSA-cm82-qh9h-xpj6: In the Linux kernel, the following vulnerability has been resolved:
xfs: fix a UAF problem in xattr repair
The xchk_setup_xattr_buf function can all↗2026-01-13
📋Vendor Advisories
5Debian▶
CVE-2025-68784: linux - In the Linux kernel, the following vulnerability has been resolved: xfs: fix a ...↗2025