CVE-2026-80805: Linux kernel · xfs: validate attr entry pointer before field access
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in e99120b5944a16d0bc27e52b33de78bcdaaabf5c : update Linux kernel when convenient.
Data as of 6 Nov 2026, 17:34 UTC
Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD
Thin evidence
One scorer or none- CISA SSVC
- Exploitation
- No evidence of active exploitation and no public proof of concept
- Automatable
- Attackers cannot reliably automate steps 1–4 of the kill chain
- Technical impact
- Limited control over the software or limited information exposure
CISA SSVC assessment, 2026-11-06.
- Patch
- Available – fixed in e99120b5944a16d0bc27e52b33de78bcdaaabf5c, c35da2bac6f7cb9a9be73f188b4fcc324615c327, b7eea80be25f3334f131d52982b3131aba77b97d +6
Exploitation evidence
Disclosed: evidence found.
CVE published 4 Sep 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 6 Nov 2026.
What to do
Upgrade to a fixed release listed under Affected software.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
AI-suggested
A fix is available and has been applied in multiple Linux kernel commits. Users should update to a Linux kernel version that includes these fixes. Since this is a kernel vulnerability, applying the official kernel patches or upgrading to a fixed kernel release is the recommended mitigation.
Description
A vulnerability in the Linux kernel's XFS filesystem code allows out-of-bounds memory reads due to improper validation of attribute entry pointers before accessing their fields. This flaw occurs in the xfs_attr3_leaf_verify_entry() function, where fields are accessed before confirming the pointer is within buffer bounds. The issue has been fixed by adding explicit bounds checks using offsetof() to ensure safe access.
References
- git.kernel.org/stable/c/0f82586741e39926542f621bafa424e237a04fa4 (opens in a new tab)
- git.kernel.org/stable/c/134d82a2b5e3eba3ebf58753a1387b22f26ca1de (opens in a new tab)
- git.kernel.org/stable/c/03a12253dd2a036545bdb0110a4e0b8dc70f8e7c (opens in a new tab)
- git.kernel.org/stable/c/e99120b5944a16d0bc27e52b33de78bcdaaabf5c (opens in a new tab)
- git.kernel.org/stable/c/98a42bb9d60d42898c3494de351a1bf508348cde (opens in a new tab)
- git.kernel.org/stable/c/184c1a80421a5b5ddcd262e47980ce2e67fee211 (opens in a new tab)
- git.kernel.org/stable/c/9f92e749fc08b7ff3d9da190c4d1b2273745b282 (opens in a new tab)
- git.kernel.org/stable/c/c35da2bac6f7cb9a9be73f188b4fcc324615c327 (opens in a new tab)
- git.kernel.org/stable/c/b7eea80be25f3334f131d52982b3131aba77b97d (opens in a new tab)