CVE-2026-23252
published 2026-03-18CVE-2026-23252: In the Linux kernel, the following vulnerability has been resolved: xfs: get rid of the xchk_xfile_*_descr calls The xchk_xfile_*_descr macros call kasprintf…
PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.12%
2.3th percentile
In the Linux kernel, the following vulnerability has been resolved:
xfs: get rid of the xchk_xfile_*_descr calls
The xchk_xfile_*_descr macros call kasprintf, which can fail to allocate
memory if the formatted string is larger than 16 bytes (or whatever the
nofail guarantees are nowadays). Some of them could easily exceed that,
and Jiaming Zhang found a few places where that can happen with syzbot.
The descriptions are debugging aids and aren't required to be unique, so
let's just pass in static strings and eliminate this path to failure.
Note this patch touches a number of commits, most of which were merged
between 6.6 and 6.14.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.19.6-1 (forky) | linux 6.19.6-1 (forky) |
| linux | linux | — | — |
| linux | linux | >= ab97f4b1c030750f2475bf4da8a9554d02206640 < 695455fbc49053cbf555f2f302a5dcd600f412ff | 695455fbc49053cbf555f2f302a5dcd600f412ff |
| linux | linux | >= ab97f4b1c030750f2475bf4da8a9554d02206640 < 18e9cf2259b4157fd282b323514375f2f6a59edb | 18e9cf2259b4157fd282b323514375f2f6a59edb |
| linux | linux | >= ab97f4b1c030750f2475bf4da8a9554d02206640 < 2d8afee89262762fe0e5547772708c75f320c957 | 2d8afee89262762fe0e5547772708c75f320c957 |
| linux | linux | >= ab97f4b1c030750f2475bf4da8a9554d02206640 < 60382993a2e18041f88c7969f567f168cd3b4de3 | 60382993a2e18041f88c7969f567f168cd3b4de3 |
| linux | linux_kernel | >= 0 < 6.19.6-1 | 6.19.6-1 |
| linux | linux_kernel | >= 6.10 < 6.12.78 | 6.12.78 |
| linux | linux_kernel | >= 6.10.0 < 6.12.78 | 6.12.78 |
| linux | linux_kernel | >= 6.13 < 6.18.16 | 6.18.16 |
| linux | linux_kernel | >= 6.13.0 < 6.18.16 | 6.18.16 |
| linux | linux_kernel | >= 6.19 < 6.19.6 | 6.19.6 |
| linux | linux_kernel | >= 6.19.0 < 6.19.6 | 6.19.6 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
vendor_redhat5.5LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
xfs: get rid of the xchk_xfile_*_descr calls
osv·2026-03-18
CVE-2026-23252 xfs: get rid of the xchk_xfile_*_descr calls
xfs: get rid of the xchk_xfile_*_descr calls
In the Linux kernel, the following vulnerability has been resolved:
xfs: get rid of the xchk_xfile_*_descr calls
The xchk_xfile_*_descr macros call kasprintf, which can fail to allocate
memory if the formatted string is larger than 16 bytes (or whatever the
nofail guarantees are nowadays). Some of them could easily exceed that,
and Jiaming Zhang found a few places where that can happen with syzbot.
The descriptions are debugging aids and aren't required to be unique, so
let's just pass in static strings and eliminate this path to failure.
Note this patch touches a number of commits, most of which were merged
between 6.6 and 6.14.
GHSA
GHSA-m267-vw57-h3jp: In the Linux kernel, the following vulnerability has been resolved:
xfs: get rid of the xchk_xfile_*_descr calls
The xchk_xfile_*_descr macros call
ghsa_unreviewed·2026-03-18
CVE-2026-23252 GHSA-m267-vw57-h3jp: In the Linux kernel, the following vulnerability has been resolved:
xfs: get rid of the xchk_xfile_*_descr calls
The xchk_xfile_*_descr macros call
In the Linux kernel, the following vulnerability has been resolved:
xfs: get rid of the xchk_xfile_*_descr calls
The xchk_xfile_*_descr macros call kasprintf, which can fail to allocate
memory if the formatted string is larger than 16 bytes (or whatever the
nofail guarantees are nowadays). Some of them could easily exceed that,
and Jiaming Zhang found a few places where that can happen with syzbot.
The descriptions are debugging aids and aren't required to be unique, so
let's just pass in static strings and eliminate this path to failure.
Note this patch touches a number of commits, most of which were merged
between 6.6 and 6.14.
OSV
CVE-2026-23252: In the Linux kernel, the following vulnerability has been resolved: xfs: get rid of the xchk_xfile_*_descr calls The xchk_xfile_*_descr macros call ka
osv·2026-03-18
CVE-2026-23252 CVE-2026-23252: In the Linux kernel, the following vulnerability has been resolved: xfs: get rid of the xchk_xfile_*_descr calls The xchk_xfile_*_descr macros call ka
In the Linux kernel, the following vulnerability has been resolved: xfs: get rid of the xchk_xfile_*_descr calls The xchk_xfile_*_descr macros call kasprintf, which can fail to allocate memory if the formatted string is larger than 16 bytes (or whatever the nofail guarantees are nowadays). Some of them could easily exceed that, and Jiaming Zhang found a few places where that can happen with syzbot. The descriptions are debugging aids and aren't required to be unique, so let's just pass in static strings and eliminate this path to failure. Note this patch touches a number of commits, most of which were merged between 6.6 and 6.14.
Red Hat
kernel: xfs: get rid of the xchk_xfile_*_descr calls
vendor_redhat·2026-03-18·CVSS 5.5
CVE-2026-23252 [LOW] kernel: xfs: get rid of the xchk_xfile_*_descr calls
kernel: xfs: get rid of the xchk_xfile_*_descr calls
In the Linux kernel, the following vulnerability has been resolved:
xfs: get rid of the xchk_xfile_*_descr calls
The xchk_xfile_*_descr macros call kasprintf, which can fail to allocate
memory if the formatted string is larger than 16 bytes (or whatever the
nofail guarantees are nowadays). Some of them could easily exceed that,
and Jiaming Zhang found a few places where that can happen with syzbot.
The descriptions are debugging aids and aren't required to be unique, so
let's just pass in static strings and eliminate this path to failure.
Note this patch touches a number of commits, most of which were merged
between 6.6 and 6.14.
Package: kernel (Red Hat Enterprise Linux 10) - Fix deferred
Package: kernel (Red Hat Enterprise Linux 6)
Debian
CVE-2026-23252: linux - In the Linux kernel, the following vulnerability has been resolved: xfs: get ri...
vendor_debian·2026
CVE-2026-23252 [LOW] CVE-2026-23252: linux - In the Linux kernel, the following vulnerability has been resolved: xfs: get ri...
In the Linux kernel, the following vulnerability has been resolved: xfs: get rid of the xchk_xfile_*_descr calls The xchk_xfile_*_descr macros call kasprintf, which can fail to allocate memory if the formatted string is larger than 16 bytes (or whatever the nofail guarantees are nowadays). Some of them could easily exceed that, and Jiaming Zhang found a few places where that can happen with syzbot. The descriptions are debugging aids and aren't required to be unique, so let's just pass in static strings and eliminate this path to failure. Note this patch touches a number of commits, most of which were merged between 6.6 and 6.14.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved (fixed in 6.19.6-1)
sid: resolved (fixed in 6.19.6-1)
trixie: open
No detection rules found.
No public exploits indexed.
Wiz
CVE-2026-23252 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2026-23252 CVE-2026-23252 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-23252 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
xfs: get rid of the xchk_xfile_*_descr calls
The xchk_xfile_*_descr macros call kasprintf, which can fail to allocate
memory if the formatted string is larger than 16 bytes (or whatever the
nofail guarantees are nowadays). Some of them could easily exceed that,
and Jiaming Zhang found a few places where that can happen with syzbot.
The descriptions are debugging aids and aren't required to be unique, so
let's just pass in static strings and eliminate this path to failure.
Note this patch touches a number of commits, most of which were merged
between 6.6 and 6.14.
Source : NVD
Published March 18, 2026
CNA Score N/A
Affected Technologies
Linux K
Bugzilla
CVE-2026-23252 kernel: xfs: get rid of the xchk_xfile_*_descr calls
bugzilla·2026-03-18·CVSS 5.5
CVE-2026-23252 [MEDIUM] CVE-2026-23252 kernel: xfs: get rid of the xchk_xfile_*_descr calls
CVE-2026-23252 kernel: xfs: get rid of the xchk_xfile_*_descr calls
In the Linux kernel, the following vulnerability has been resolved:
xfs: get rid of the xchk_xfile_*_descr calls
The xchk_xfile_*_descr macros call kasprintf, which can fail to allocate
memory if the formatted string is larger than 16 bytes (or whatever the
nofail guarantees are nowadays). Some of them could easily exceed that,
and Jiaming Zhang found a few places where that can happen with syzbot.
The descriptions are debugging aids and aren't required to be unique, so
let's just pass in static strings and eliminate this path to failure.
Note this patch touches a number of commits, most of which were merged
between 6.6 and 6.14.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2026031846-CVE
2026-03-18
Published