CVE-2026-23250
Analyzed Analyzed - Analysis Complete

Null Pointer Dereference in Linux XFS xchk_scrub_create_subord Function

Publication date: 2026-03-18

Last updated on: 2026-05-21

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: xfs: check return value of xchk_scrub_create_subord Fix this function to return NULL instead of a mangled ENOMEM, then fix the callers to actually check for a null pointer and return ENOMEM. Most of the corrections here are for code merged between 6.2 and 6.10.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-03-18
Last Modified
2026-05-21
Generated
2026-07-06
AI Q&A
2026-03-18
EPSS Evaluated
2026-07-05
NVD
CVE-2026-23250
EUVD
EUVD-2026-12854

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
linux linux_kernel From 6.13 (inc) to 6.18.16 (exc)
linux linux_kernel From 6.19 (inc) to 6.19.6 (exc)
linux linux_kernel From 6.10 (inc) to 6.12.75 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-476 The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is related to the Linux kernel's xfs filesystem code, specifically the function xchk_scrub_create_subord. The issue was that the function did not properly return a NULL pointer when it encountered an out-of-memory condition (ENOMEM). Instead, it returned a mangled ENOMEM value, which caused the callers of this function to not correctly detect the error. The fix involved changing the function to return NULL properly and updating the callers to check for this NULL pointer and then return ENOMEM appropriately.

Impact Analysis

If the function xchk_scrub_create_subord does not correctly signal an out-of-memory error, it could lead to improper error handling in the Linux kernel's xfs filesystem operations. This might cause unexpected behavior or instability when the system runs low on memory during filesystem checks or scrubbing operations. However, the exact impact depends on how this error propagates and is handled in the broader system context.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-23250. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart