CVE-2026-80591 PUBLISHED

f2fs: fix listxattr handling of corrupted xattr entries

Assigner: Linux
Reserved: 26.08.2026 Published: 28.08.2026 Updated: 28.08.2026

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix listxattr handling of corrupted xattr entries

Validate the xattr entry before reading its fields in f2fs_listxattr(). Return -EFSCORRUPTED when the entry is outside the valid xattr storage area instead of returning a successful partial result.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 688078e7f36c293dae25b338ddc9e0a2790f6e06 to 7dfac47e4189692f35230f3064acf2540e6d75fe (excl.)
  • affected from 688078e7f36c293dae25b338ddc9e0a2790f6e06 to c8a10f174316e80d577e6549099b71a7a2111f3f (excl.)
  • affected from 688078e7f36c293dae25b338ddc9e0a2790f6e06 to dfa4891c27bccbd83d511a065721e85621f275a1 (excl.)
  • affected from 688078e7f36c293dae25b338ddc9e0a2790f6e06 to 2770041f34b52334ea63351ffb1cc2007a9de46e (excl.)
  • affected from 688078e7f36c293dae25b338ddc9e0a2790f6e06 to 7dd01f7d0291583e3e5420c95c7d584e114899bd (excl.)
  • affected from 688078e7f36c293dae25b338ddc9e0a2790f6e06 to ec9f79c8d5b28a928e65b67cd138c841571cf502 (excl.)
  • affected from 688078e7f36c293dae25b338ddc9e0a2790f6e06 to 3c0dbfecd859fd02fe9008f33a83146102ccd9ba (excl.)
  • affected from 688078e7f36c293dae25b338ddc9e0a2790f6e06 to 5ef5bc304f23c3fe255d4936472378dcb74d0e94 (excl.)
  • Version ae811cecbbb231f11a84acaf74baca1283b964c7 is affected
  • Version ed523cbd4a6594edf123dc03ec9d70ea4f793671 is affected
  • Version 5811f24abd27a8a0791c6909c6ff803659060c84 is affected
  • affected from 4.14.181 to 4.15 (excl.)
  • affected from 4.19.119 to 4.20 (excl.)
  • affected from 5.4.36 to 5.5 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 5.5 is affected
  • unaffected from 0 to 5.5 (excl.)
  • unaffected from 5.10.261 to 5.10.* (incl.)
  • unaffected from 5.15.212 to 5.15.* (incl.)
  • unaffected from 6.1.178 to 6.1.* (incl.)
  • unaffected from 6.6.145 to 6.6.* (incl.)
  • unaffected from 6.12.96 to 6.12.* (incl.)
  • unaffected from 6.18.39 to 6.18.* (incl.)
  • unaffected from 7.1.5 to 7.1.* (incl.)
  • unaffected from 7.2 to * (incl.)

References