Answer in brief
CVE-2026-80805 records a Unknown severity vulnerability in xfs: validate attr entry pointer before field access. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=c84760659dcf237902d4cc997cd5f55cb3b2807f <0f82586741e39926542f621bafa424e237a04fa4 || >=c84760659dcf237902d4cc997cd5f55cb3b2807f <134d82a2b5e3eba3ebf58753a1387b22f26ca1de || >=c84760659dcf237902d4cc997cd5f55cb3b2807f <03a12253dd2a036545bdb0110a4e0b8dc70f8e7c || >=c84760659dcf237902d4cc997cd5f55cb3b2807f <e99120b5944a16d0bc27e52b33de78bcdaaabf5c || >=c84760659dcf237902d4cc997cd5f55cb3b2807f <98a42bb9d60d42898c3494de351a1bf508348cde || >=c84760659dcf237902d4cc997cd5f55cb3b2807f <184c1a80421a5b5ddcd262e47980ce2e67fee211 || >=c84760659dcf237902d4cc997cd5f55cb3b2807f <9f92e749fc08b7ff3d9da190c4d1b2273745b282 || >=c84760659dcf237902d4cc997cd5f55cb3b2807f <c35da2bac6f7cb9a9be73f188b4fcc324615c327 || >=c84760659dcf237902d4cc997cd5f55cb3b2807f <b7eea80be25f3334f131d52982b3131aba77b97d | 0f82586741e39926542f621bafa424e237a04fa4, 134d82a2b5e3eba3ebf58753a1387b22f26ca1de, 03a12253dd2a036545bdb0110a4e0b8dc70f8e7c, e99120b5944a16d0bc27e52b33de78bcdaaabf5c, 98a42bb9d60d42898c3494de351a1bf508348cde, 184c1a80421a5b5ddcd262e47980ce2e67fee211, 9f92e749fc08b7ff3d9da190c4d1b2273745b282, c35da2bac6f7cb9a9be73f188b4fcc324615c327, b7eea80be25f3334f131d52982b3131aba77b97d |
| Linux/Linuxgeneric | 5.5 | Not reported |
Published upstream
Sep 4, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Sep 4, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Sep 4, 2026
In the Linux kernel, the following vulnerability has been resolved: xfs: validate attr entry pointer before field access xfs_attr3_leaf_verify_entry() accesses lentry/rentry fields (namelen, valuelen) before checking if the entry pointer itself is within bounds. If nameidx is crafted to point near the end of the buffer, these field accesses can read out-of-bounds before the bounds check at name_end > buf_end is performed. Add explicit bounds checks for entry pointers before accessing their fields. Use offsetof() to check that the start of the flexible array member (nameval/name) is within bounds, which ensures all preceding fields are safe to access.
Quoted source text, attributed separately from HOL analysis.