CVE-2026-80805
xfs: validate attr entry pointer before field access
Description
In the Linux kernel, the following vulnerability has been resolved: xfs: validate attr entry pointer before field access xfs_attr3_leaf_verify_entry() accesses lentry/rentry fields (namelen, valuelen) before checking if the entry pointer itself is within bounds. If nameidx is crafted to point near the end of the buffer, these field accesses can read out-of-bounds before the bounds check at name_end > buf_end is performed. Add explicit bounds checks for entry pointers before accessing their fields. Use offsetof() to check that the start of the flexible array member (nameval/name) is within bounds, which ensures all preceding fields are safe to access.
INFO
Published Date :
Sept. 4, 2026, 4:18 p.m.
Last Modified :
Sept. 4, 2026, 4:18 p.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Solution
- Add explicit bounds checks for entry pointers.
- Validate entry pointers before accessing fields.
- Use offsetof() to check flexible array member bounds.
- Update the Linux kernel to the latest version.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-80805.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-80805 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-80805
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-80805 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-80805 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Sep. 04, 2026
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: xfs: validate attr entry pointer before field access xfs_attr3_leaf_verify_entry() accesses lentry/rentry fields (namelen, valuelen) before checking if the entry pointer itself is within bounds. If nameidx is crafted to point near the end of the buffer, these field accesses can read out-of-bounds before the bounds check at name_end > buf_end is performed. Add explicit bounds checks for entry pointers before accessing their fields. Use offsetof() to check that the start of the flexible array member (nameval/name) is within bounds, which ensures all preceding fields are safe to access. Added Affected New affected value received. <a href="https://github.com/CVEProject/cvelistV5/blob/main/cves/2026/80xxx/CVE-2026-80805.json">CVE-2026-80805</a> Added Reference https://git.kernel.org/stable/c/03a12253dd2a036545bdb0110a4e0b8dc70f8e7c Added Reference https://git.kernel.org/stable/c/0f82586741e39926542f621bafa424e237a04fa4 Added Reference https://git.kernel.org/stable/c/134d82a2b5e3eba3ebf58753a1387b22f26ca1de Added Reference https://git.kernel.org/stable/c/184c1a80421a5b5ddcd262e47980ce2e67fee211 Added Reference https://git.kernel.org/stable/c/98a42bb9d60d42898c3494de351a1bf508348cde Added Reference https://git.kernel.org/stable/c/9f92e749fc08b7ff3d9da190c4d1b2273745b282 Added Reference https://git.kernel.org/stable/c/b7eea80be25f3334f131d52982b3131aba77b97d Added Reference https://git.kernel.org/stable/c/c35da2bac6f7cb9a9be73f188b4fcc324615c327 Added Reference https://git.kernel.org/stable/c/e99120b5944a16d0bc27e52b33de78bcdaaabf5c