CVE-2026-74728
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
22/08/2026
Última modificación:
22/08/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
xfs: handle NULL b_addr in xfs_buf_free<br />
<br />
When xfs_buf_alloc_backing_mem() fails, xfs_buf_free() is called with<br />
bp->b_addr still NULL. The code falls through to the folio_put path<br />
which calls virt_to_folio(NULL), dereferencing an invalid address and<br />
causing a kernel crash.<br />
<br />
Call Trace:<br />
xfs_buf_free+0x25f/0x510<br />
xfs_buf_alloc+0xc98/0x19b0<br />
xfs_buf_find_insert+0x55/0x14d0<br />
xfs_buf_get_map+0x122b/0x17c0<br />
xfbtree_init_leaf_block+0x11c/0x4a0<br />
xfbtree_init+0x1bb/0x460<br />
xrep_rmap_setup_scan+0x100/0x1f0<br />
xrep_rmapbt+0x41/0xc0<br />
<br />
Fix this by skipping folio_put() when bp->b_addr is NULL.


