CVE-2026-23252

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
18/03/2026
Last modified:
25/03/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> xfs: get rid of the xchk_xfile_*_descr calls<br /> <br /> The xchk_xfile_*_descr macros call kasprintf, which can fail to allocate<br /> memory if the formatted string is larger than 16 bytes (or whatever the<br /> nofail guarantees are nowadays). Some of them could easily exceed that,<br /> and Jiaming Zhang found a few places where that can happen with syzbot.<br /> <br /> The descriptions are debugging aids and aren&amp;#39;t required to be unique, so<br /> let&amp;#39;s just pass in static strings and eliminate this path to failure.<br /> Note this patch touches a number of commits, most of which were merged<br /> between 6.6 and 6.14.

Impact