CVE-2026-80533
Received Received - Intake

XFS Filesystem AGI Repair Null Pointer Dereference

Publication date: 2026-08-26

Last updated on: 2026-08-26

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: xfs: don't walk off the end of a null sc->sa.agi_bp in AGI repair LOLLM noticed a longstanding bug where xrep_iunlink_walk_ondisk_bucket tries to walk ragi->sc->sa.agi_bp to rebuild the unlinked inode lists. Unfortunately, it's possible for agi_bp to be null if the buffer verifier fails, so we have to use ragi->agi_bp (which skips verifier checks) instead.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-26
Last Modified
2026-08-26
Generated
2026-08-26
AI Q&A
2026-08-26
EPSS Evaluated
N/A
NVD
CVE-2026-80533
EUVD
EUVD-2026-66448

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the Linux kernel's XFS file system. It occurs when the system tries to repair unlinked inode lists but incorrectly uses a null buffer pointer (agi_bp). This can lead to memory access issues or crashes during file system operations.

Impact Analysis

If exploited, this flaw could cause system instability, crashes, or data corruption in systems using the XFS file system. It may lead to denial-of-service conditions or unexpected behavior during file operations.

Mitigation Strategies

Update your Linux kernel to the latest patched version to resolve the XFS AGI repair bug. Monitor kernel logs for XFS-related errors indicating potential exploitation attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80533. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart