SB20260827107 - Improper control of a resource through its lifetime in Linux kernel xfs libxfs

Description

This security bulletin contains information about 1 vulnerability.

1) Improper control of a resource through its lifetime (CVE-ID: CVE-2026-80530)

CWE-ID: CWE-664 - Improper control of a resource through its lifetime

CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local user to corrupt data.

The vulnerability exists due to improper state management in xmi_can_exchange_reflink_flags in the XFS exchange-range handling when exchanging full-file ranges with XFS_EXCHMAPS_INO1_WRITTEN set. A local user can trigger a crafted exchange operation to corrupt data.

The issue occurs because hole and unwritten mappings from the first file can be skipped, leaving shared written extents on an inode whose reflink flag is later cleared.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/03c9c9116e6da641424681f705698d7f5e2128e0
• https://git.kernel.org/stable/c/0f27b22343b63e10773e6781344640c2c753eec3
• https://git.kernel.org/stable/c/2efbd8890b53f4756fdc7b0ef346fa514ffb7d66
• https://git.kernel.org/stable/c/b2d5a81dae385333f9734910277fbf94c78bd17f