SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-80591

HIGH · CVSS 7.8 EPSS 0.13%

Source: NVD + CISA KEV + EPSS · Published 2026-08-28 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's f2fs file system, specifically in the handling of corrupted extended attribute (xattr) entries during the listxattr operation. If exploited, this flaw could lead to incorrect data being returned, potentially compromising data integrity by allowing partial results from invalid entries. System administrators and developers managing Linux environments using the f2fs file system should prioritize applying the fix to mitigate potential data corruption risks.

CVE
CVE-2026-80591
Severity
HIGH
CVSS
7.8
EPSS
0.13%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix listxattr handling of corrupted xattr entries Validate the xattr entry before reading its fields in f2fs_listxattr(). Return -EFSCORRUPTED when the entry is outside the valid xattr storage area instead of returning a successful partial result.