---
id: CVE-2026-23250
title: 'xfs: check return value of xchk_scrub_create_subord'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  xfs: check return value of xchk_scrub_create_subord

  Fix this function to return NULL instead of a mangled ENOMEM, then fix
  the callers to actually check for a null poi…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 1a5f6e08d4e379a23da5be974aee50b26a20c5b0 <
    d6f3f7d4dd8a179394cef03c00993d57f5f68601
  - >-
    Linux >= 1a5f6e08d4e379a23da5be974aee50b26a20c5b0 <
    2b658d1249666cc55af9484dcf5f45ca438d4ecc
  - >-
    Linux >= 1a5f6e08d4e379a23da5be974aee50b26a20c5b0 <
    b2df809edd8cb7d1c3e19d9f6aabc2bd55d2bfb6
  - >-
    Linux >= 1a5f6e08d4e379a23da5be974aee50b26a20c5b0 <
    ca27313fb3f23e4ac18532ede4ec1c7cc5814c4a
  - Linux 6.10
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T21:23:19.508373Z'
published: '2026-03-18'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:33:32.810Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-23250'
references:
  - url: 'https://git.kernel.org/stable/c/d6f3f7d4dd8a179394cef03c00993d57f5f68601'
  - url: 'https://git.kernel.org/stable/c/2b658d1249666cc55af9484dcf5f45ca438d4ecc'
  - url: 'https://git.kernel.org/stable/c/b2df809edd8cb7d1c3e19d9f6aabc2bd55d2bfb6'
  - url: 'https://git.kernel.org/stable/c/ca27313fb3f23e4ac18532ede4ec1c7cc5814c4a'
tags:
  - cve.org
epss: 0.0013
epssPercentile: 0.02617
ingestedAt: '2026-11-05T22:38:32.101Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

xfs: check return value of xchk_scrub_create_subord

Fix this function to return NULL instead of a mangled ENOMEM, then fix
the callers to actually check for a null pointer and return ENOMEM.
Most of the corrections here are for code merged between 6.2 and 6.10.

## Affected

- `Linux >= 1a5f6e08d4e379a23da5be974aee50b26a20c5b0 < d6f3f7d4dd8a179394cef03c00993d57f5f68601`
- `Linux >= 1a5f6e08d4e379a23da5be974aee50b26a20c5b0 < 2b658d1249666cc55af9484dcf5f45ca438d4ecc`
- `Linux >= 1a5f6e08d4e379a23da5be974aee50b26a20c5b0 < b2df809edd8cb7d1c3e19d9f6aabc2bd55d2bfb6`
- `Linux >= 1a5f6e08d4e379a23da5be974aee50b26a20c5b0 < ca27313fb3f23e4ac18532ede4ec1c7cc5814c4a`
- `Linux 6.10`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.