CVE-2026-23250: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: xfs: check return value of xchk_scrub_create_subord Fix this function to return NULL instead of a mangled ENOMEM, then fix the callers to actually check for a null pointer and return ENOMEM. Most of the corrections here are for code merged between 6.2 and 6.10.

Affected products

• Linux Linux Kernel: from 6.10, before 6.12.75 (fixed in 6.12.75); from 6.13, before 6.18.16 (fixed in 6.18.16); from 6.19, before 6.19.6 (fixed in 6.19.6)

Published 2026-03-18. Last modified 2026-06-17.