CVE-2026-23250
published 2026-03-18CVE-2026-23250: In the Linux kernel, the following vulnerability has been resolved: xfs: check return value of xchk_scrub_create_subord Fix this function to return NULL…
PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.12%
2.3th percentile
In the Linux kernel, the following vulnerability has been resolved:
xfs: check return value of xchk_scrub_create_subord
Fix this function to return NULL instead of a mangled ENOMEM, then fix
the callers to actually check for a null pointer and return ENOMEM.
Most of the corrections here are for code merged between 6.2 and 6.10.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.19.6-1 (forky) | linux 6.19.6-1 (forky) |
| linux | linux | — | — |
| linux | linux | >= 1a5f6e08d4e379a23da5be974aee50b26a20c5b0 < d6f3f7d4dd8a179394cef03c00993d57f5f68601 | d6f3f7d4dd8a179394cef03c00993d57f5f68601 |
| linux | linux | >= 1a5f6e08d4e379a23da5be974aee50b26a20c5b0 < 2b658d1249666cc55af9484dcf5f45ca438d4ecc | 2b658d1249666cc55af9484dcf5f45ca438d4ecc |
| linux | linux | >= 1a5f6e08d4e379a23da5be974aee50b26a20c5b0 < b2df809edd8cb7d1c3e19d9f6aabc2bd55d2bfb6 | b2df809edd8cb7d1c3e19d9f6aabc2bd55d2bfb6 |
| linux | linux | >= 1a5f6e08d4e379a23da5be974aee50b26a20c5b0 < ca27313fb3f23e4ac18532ede4ec1c7cc5814c4a | ca27313fb3f23e4ac18532ede4ec1c7cc5814c4a |
| linux | linux_kernel | >= 0 < 6.19.6-1 | 6.19.6-1 |
| linux | linux_kernel | >= 6.10 < 6.12.75 | 6.12.75 |
| linux | linux_kernel | >= 6.10.0 < 6.12.75 | 6.12.75 |
| linux | linux_kernel | >= 6.13 < 6.18.16 | 6.18.16 |
| linux | linux_kernel | >= 6.13.0 < 6.18.16 | 6.18.16 |
| linux | linux_kernel | >= 6.19 < 6.19.6 | 6.19.6 |
| linux | linux_kernel | >= 6.19.0 < 6.19.6 | 6.19.6 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
xfs: check return value of xchk_scrub_create_subord
osv·2026-03-18
CVE-2026-23250 xfs: check return value of xchk_scrub_create_subord
xfs: check return value of xchk_scrub_create_subord
In the Linux kernel, the following vulnerability has been resolved:
xfs: check return value of xchk_scrub_create_subord
Fix this function to return NULL instead of a mangled ENOMEM, then fix
the callers to actually check for a null pointer and return ENOMEM.
Most of the corrections here are for code merged between 6.2 and 6.10.
OSV
CVE-2026-23250: In the Linux kernel, the following vulnerability has been resolved: xfs: check return value of xchk_scrub_create_subord Fix this function to return NU
osv·2026-03-18
CVE-2026-23250 CVE-2026-23250: In the Linux kernel, the following vulnerability has been resolved: xfs: check return value of xchk_scrub_create_subord Fix this function to return NU
In the Linux kernel, the following vulnerability has been resolved: xfs: check return value of xchk_scrub_create_subord Fix this function to return NULL instead of a mangled ENOMEM, then fix the callers to actually check for a null pointer and return ENOMEM. Most of the corrections here are for code merged between 6.2 and 6.10.
GHSA
GHSA-g9h3-f67f-jqj7: In the Linux kernel, the following vulnerability has been resolved:
xfs: check return value of xchk_scrub_create_subord
Fix this function to return
ghsa_unreviewed·2026-03-18
CVE-2026-23250 GHSA-g9h3-f67f-jqj7: In the Linux kernel, the following vulnerability has been resolved:
xfs: check return value of xchk_scrub_create_subord
Fix this function to return
In the Linux kernel, the following vulnerability has been resolved:
xfs: check return value of xchk_scrub_create_subord
Fix this function to return NULL instead of a mangled ENOMEM, then fix
the callers to actually check for a null pointer and return ENOMEM.
Most of the corrections here are for code merged between 6.2 and 6.10.
Red Hat
kernel: xfs: check return value of xchk_scrub_create_subord
vendor_redhat·2026-03-18·CVSS 5.5
CVE-2026-23250 [MEDIUM] CWE-253 kernel: xfs: check return value of xchk_scrub_create_subord
kernel: xfs: check return value of xchk_scrub_create_subord
In the Linux kernel, the following vulnerability has been resolved:
xfs: check return value of xchk_scrub_create_subord
Fix this function to return NULL instead of a mangled ENOMEM, then fix
the callers to actually check for a null pointer and return ENOMEM.
Most of the corrections here are for code merged between 6.2 and 6.10.
A NULL pointer dereference vulnerability was found in the Linux kernel's XFS filesystem scrub code. The xchk_scrub_create_subord() function returns a mangled ENOMEM error code instead of NULL on memory allocation failure. Callers do not properly check for null pointers before using the returned value, leading to NULL pointer dereferences when memory allocation fails during scrub operations.
Statement: Th
Debian
CVE-2026-23250: linux - In the Linux kernel, the following vulnerability has been resolved: xfs: check ...
vendor_debian·2026
CVE-2026-23250 [LOW] CVE-2026-23250: linux - In the Linux kernel, the following vulnerability has been resolved: xfs: check ...
In the Linux kernel, the following vulnerability has been resolved: xfs: check return value of xchk_scrub_create_subord Fix this function to return NULL instead of a mangled ENOMEM, then fix the callers to actually check for a null pointer and return ENOMEM. Most of the corrections here are for code merged between 6.2 and 6.10.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved (fixed in 6.19.6-1)
sid: resolved (fixed in 6.19.6-1)
trixie: open
No detection rules found.
No public exploits indexed.
2026-03-18
Published