CVE-2026-23250
Analyzed Analyzed - Analysis Complete
Null Pointer Dereference in Linux XFS xchk_scrub_create_subord Function

Publication date: 2026-03-18

Last updated on: 2026-05-21

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: xfs: check return value of xchk_scrub_create_subord Fix this function to return NULL instead of a mangled ENOMEM, then fix the callers to actually check for a null pointer and return ENOMEM. Most of the corrections here are for code merged between 6.2 and 6.10.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-03-18
Last Modified
2026-05-21
Generated
2026-06-16
AI Q&A
2026-03-18
EPSS Evaluated
2026-06-14
NVD
CVE-2026-23250
EUVD
EUVD-2026-12854
Affected Vendors & Products
Showing 3 associated CPEs
Vendor Product Version / Range
linux linux_kernel From 6.13 (inc) to 6.18.16 (exc)
linux linux_kernel From 6.19 (inc) to 6.19.6 (exc)
linux linux_kernel From 6.10 (inc) to 6.12.75 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-476 The product dereferences a pointer that it expects to be valid but is NULL.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is related to the Linux kernel's xfs filesystem code, specifically the function xchk_scrub_create_subord. The issue was that the function did not properly return a NULL pointer when it encountered an out-of-memory condition (ENOMEM). Instead, it returned a mangled ENOMEM value, which caused the callers of this function to not correctly detect the error. The fix involved changing the function to return NULL properly and updating the callers to check for this NULL pointer and then return ENOMEM appropriately.

Impact Analysis

If the function xchk_scrub_create_subord does not correctly signal an out-of-memory error, it could lead to improper error handling in the Linux kernel's xfs filesystem operations. This might cause unexpected behavior or instability when the system runs low on memory during filesystem checks or scrubbing operations. However, the exact impact depends on how this error propagates and is handled in the broader system context.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-23250. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart