---
id: CVE-2026-23251
title: 'xfs: only call xf{array,blob}_destroy if we have a valid pointer'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  xfs: only call xf{array,blob}_destroy if we have a valid pointer

  Only call the xfarray and xfblob destructor if we have a valid pointer,
  and be sure to null out that p…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= ab97f4b1c030750f2475bf4da8a9554d02206640 <
    5de5be3ed7e7fa4ebde4f4b58fb9a629644f9202
  - >-
    Linux >= ab97f4b1c030750f2475bf4da8a9554d02206640 <
    c9ccefacae0d8091683447bc338bd7741417039d
  - >-
    Linux >= ab97f4b1c030750f2475bf4da8a9554d02206640 <
    d827612c81a26cc1dd83a211cfcb5ad8765da0c4
  - >-
    Linux >= ab97f4b1c030750f2475bf4da8a9554d02206640 <
    ba408d299a3bb3c5309f40c5326e4fb83ead4247
  - Linux 6.10
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T21:23:28.377770Z'
published: '2026-03-18'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:33:32.978Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-23251'
references:
  - url: 'https://git.kernel.org/stable/c/5de5be3ed7e7fa4ebde4f4b58fb9a629644f9202'
  - url: 'https://git.kernel.org/stable/c/c9ccefacae0d8091683447bc338bd7741417039d'
  - url: 'https://git.kernel.org/stable/c/d827612c81a26cc1dd83a211cfcb5ad8765da0c4'
  - url: 'https://git.kernel.org/stable/c/ba408d299a3bb3c5309f40c5326e4fb83ead4247'
tags:
  - cve.org
epss: 0.0013
epssPercentile: 0.02617
ingestedAt: '2026-11-05T22:38:32.102Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

xfs: only call xf{array,blob}_destroy if we have a valid pointer

Only call the xfarray and xfblob destructor if we have a valid pointer,
and be sure to null out that pointer afterwards.  Note that this patch
fixes a large number of commits, most of which were merged between 6.9
and 6.10.

## Affected

- `Linux >= ab97f4b1c030750f2475bf4da8a9554d02206640 < 5de5be3ed7e7fa4ebde4f4b58fb9a629644f9202`
- `Linux >= ab97f4b1c030750f2475bf4da8a9554d02206640 < c9ccefacae0d8091683447bc338bd7741417039d`
- `Linux >= ab97f4b1c030750f2475bf4da8a9554d02206640 < d827612c81a26cc1dd83a211cfcb5ad8765da0c4`
- `Linux >= ab97f4b1c030750f2475bf4da8a9554d02206640 < ba408d299a3bb3c5309f40c5326e4fb83ead4247`
- `Linux 6.10`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.