CVE-2026-80531 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved:

xfs: avoid UAF on sc->tempip in xrep_tempfile_create

LOLLM noticed a potential UAF if the tempfile creation code fails after
it set sc->tempip. Fix that.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux Subscribe	Linux Kernel Subscribe

No data.

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://git.kernel.org/stable/c/08a20776ce33a2a52d856911e447c59424f0465a
https://git.kernel.org/stable/c/0c88e10d12de9ca7cbed1467bb1b52310101bff8
https://git.kernel.org/stable/c/96246a3200d32a43766152e56bc7ae2d93604d74
https://git.kernel.org/stable/c/cd1f876d1bc2e94f271e07c606cacd85b109108a

History

Wed, 26 Aug 2026 14:45:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: xfs: avoid UAF on sc->tempip in xrep_tempfile_create LOLLM noticed a potential UAF if the tempfile creation code fails after it set sc->tempip. Fix that.
Title		xfs: avoid UAF on sc->tempip in xrep_tempfile_create
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/08a20776ce33a2a52d856911e447c59424f0465a https://git.kernel.org/stable/c/0c88e10d12de9ca7cbed1467bb1b52310101bff8 https://git.kernel.org/stable/c/96246a3200d32a43766152e56bc7ae2d93604d74 https://git.kernel.org/stable/c/cd1f876d1bc2e94f271e07c606cacd85b109108a

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-26T14:37:08.594Z

Updated: 2026-08-26T14:37:08.594Z

Reserved: 2026-08-26T14:34:25.764Z

Link: CVE-2026-80531

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-08-26T15:17:07.140

Modified: 2026-08-26T15:17:07.140

Link: CVE-2026-80531

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

No weakness.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-80531", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-26T14:34:25.764Z", "datePublished": "2026-08-26T14:37:08.594Z", "dateUpdated": "2026-08-26T14:37:08.594Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-26T14:37:08.594Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: avoid UAF on sc->tempip in xrep_tempfile_create\n\nLOLLM noticed a potential UAF if the tempfile creation code fails after\nit set sc->tempip. Fix that."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/xfs/scrub/tempfile.c"], "versions": [{"version": "84c14ee39dd388d73054181c70b3f42af7ddc238", "lessThan": "08a20776ce33a2a52d856911e447c59424f0465a", "status": "affected", "versionType": "git"}, {"version": "84c14ee39dd388d73054181c70b3f42af7ddc238", "lessThan": "cd1f876d1bc2e94f271e07c606cacd85b109108a", "status": "affected", "versionType": "git"}, {"version": "84c14ee39dd388d73054181c70b3f42af7ddc238", "lessThan": "96246a3200d32a43766152e56bc7ae2d93604d74", "status": "affected", "versionType": "git"}, {"version": "84c14ee39dd388d73054181c70b3f42af7ddc238", "lessThan": "0c88e10d12de9ca7cbed1467bb1b52310101bff8", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/xfs/scrub/tempfile.c"], "versions": [{"version": "6.10", "status": "affected"}, {"version": "0", "lessThan": "6.10", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.105", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.46", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.10", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.10", "versionEndExcluding": "6.12.105"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.10", "versionEndExcluding": "6.18.46"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.10", "versionEndExcluding": "7.1.10"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.10", "versionEndExcluding": "7.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/08a20776ce33a2a52d856911e447c59424f0465a"}, {"url": "https://git.kernel.org/stable/c/cd1f876d1bc2e94f271e07c606cacd85b109108a"}, {"url": "https://git.kernel.org/stable/c/96246a3200d32a43766152e56bc7ae2d93604d74"}, {"url": "https://git.kernel.org/stable/c/0c88e10d12de9ca7cbed1467bb1b52310101bff8"}], "title": "xfs: avoid UAF on sc->tempip in xrep_tempfile_create", "x_generator": {"engine": "bippy-1.2.0"}}}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["fs/xfs/scrub/tempfile.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "08a20776ce33a2a52d856911e447c59424f0465a", "status": "affected", "version": "84c14ee39dd388d73054181c70b3f42af7ddc238", "versionType": "git"}, {"lessThan": "cd1f876d1bc2e94f271e07c606cacd85b109108a", "status": "affected", "version": "84c14ee39dd388d73054181c70b3f42af7ddc238", "versionType": "git"}, {"lessThan": "96246a3200d32a43766152e56bc7ae2d93604d74", "status": "affected", "version": "84c14ee39dd388d73054181c70b3f42af7ddc238", "versionType": "git"}, {"lessThan": "0c88e10d12de9ca7cbed1467bb1b52310101bff8", "status": "affected", "version": "84c14ee39dd388d73054181c70b3f42af7ddc238", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["fs/xfs/scrub/tempfile.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.10"}, {"lessThan": "6.10", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.105", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.46", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.10", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: avoid UAF on sc->tempip in xrep_tempfile_create\n\nLOLLM noticed a potential UAF if the tempfile creation code fails after\nit set sc->tempip. Fix that."}], "id": "CVE-2026-80531", "lastModified": "2026-08-26T15:17:07.140", "metrics": {}, "published": "2026-08-26T15:17:07.140", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/08a20776ce33a2a52d856911e447c59424f0465a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/0c88e10d12de9ca7cbed1467bb1b52310101bff8"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/96246a3200d32a43766152e56bc7ae2d93604d74"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/cd1f876d1bc2e94f271e07c606cacd85b109108a"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}