https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 09 Nov 2026 17:53:41 +0000 https://db.gcve.eu/vuln/cve-2026-98443 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>xfs: fix cursor and pointer handling when recovering iunlink buckets</p> <p>LOLLM pointed out a bug in xlog_recover_iunlink_bucket:</p> <p>1. We don&#39;t null out prev_ip after releasing it, which can lead to UAF problems if the inodegc flush call in the loop fails.</p> <p>at which point I noticed even more bugs:</p> <p>2. If the inodegc flush inside the loop fails, we also leak @ip.</p> <p>3. We set prev_agino to agino having already advanced agino, which results in inodes with i_prev_unlinked set to itself.</p> <p>4. If we exit the bottom of the loop with prev_ip set, then prev_ip aliases ip and we also set its i_prev_unlinked to itself.</p> <p>Bugs 3 and 4 introduce loops into the unlinked list, though these loops don&#39;t surface because we immediately flush each unlinked inode after loading it.</p> <p>Fix all of these issues.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>xfs: fix cursor and pointer handling when recovering iunlink buckets</p> <p>LOLLM pointed out a bug in xlog_recover_iunlink_bucket:</p> <p>1. We don&#39;t null out prev_ip after releasing it, which can lead to UAF problems if the inodegc flush call in the loop fails.</p> <p>at which point I noticed even more bugs:</p> <p>2. If the inodegc flush inside the loop fails, we also leak @ip.</p> <p>3. We set prev_agino to agino having already advanced agino, which results in inodes with i_prev_unlinked set to itself.</p> <p>4. If we exit the bottom of the loop with prev_ip set, then prev_ip aliases ip and we also set its i_prev_unlinked to itself.</p> <p>Bugs 3 and 4 introduce loops into the unlinked list, though these loops don&#39;t surface because we immediately flush each unlinked inode after loading it.</p> <p>Fix all of these issues.</p> https://db.gcve.eu/vuln/cve-2026-98443