CVE-2026-23252
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
18/03/2026
Last modified:
25/03/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
xfs: get rid of the xchk_xfile_*_descr calls<br />
<br />
The xchk_xfile_*_descr macros call kasprintf, which can fail to allocate<br />
memory if the formatted string is larger than 16 bytes (or whatever the<br />
nofail guarantees are nowadays). Some of them could easily exceed that,<br />
and Jiaming Zhang found a few places where that can happen with syzbot.<br />
<br />
The descriptions are debugging aids and aren&#39;t required to be unique, so<br />
let&#39;s just pass in static strings and eliminate this path to failure.<br />
Note this patch touches a number of commits, most of which were merged<br />
between 6.6 and 6.14.



