XFS File System Vulnerability in Linux Kernel Affecting Transaction Logging

CVE-2026-64187

What is CVE-2026-64187?

A vulnerability exists in the Linux kernel's XFS file system where a transaction entering recovery may not correctly handle items with zero regions, potentially leading to a null pointer dereference. This flaw arises during the log recovery process when a crafted log is presented, allowing an attacker to trigger instability in the system. It is essential for users of the Linux kernel to apply the appropriate patches to mitigate risks associated with this vulnerability.

References