Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-08-28T00:00:00 kernel: f2fs: fix listxattr handling of corrupted xattr entries 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CWE-125

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix listxattr handling of corrupted xattr entries Validate the xattr entry before reading its fields in f2fs_listxattr(). Return -EFSCORRUPTED when the entry is outside the valid xattr storage area instead of returning a successful partial result.

A flaw was found in the `f2fs` file system within the Linux kernel. This vulnerability arises from inadequate validation of extended attribute (xattr) entries during the `f2fs_listxattr()` function's operation. A local attacker could potentially create a corrupted xattr entry, causing the system to attempt to read data from outside the valid xattr storage area. This could lead to unexpected system behavior or the disclosure of sensitive information.

Red Hat Enterprise Linux 10 Not affected kernel Red Hat Enterprise Linux 6 Not affected kernel Red Hat Enterprise Linux 7 Not affected kernel Red Hat Enterprise Linux 7 Not affected kernel-rt Red Hat Enterprise Linux 8 Not affected kernel Red Hat Enterprise Linux 8 Not affected kernel-rt Red Hat Enterprise Linux 9 Not affected kernel Red Hat Enterprise Linux 9 Not affected kernel-rt https://www.cve.org/CVERecord?id=CVE-2026-80591 https://nvd.nist.gov/vuln/detail/CVE-2026-80591 https://lore.kernel.org/linux-cve-announce/2026082827-CVE-2026-80591-9af6@gregkh/T