CVE-2026-80533: Linux

EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: xfs: don't walk off the end of a null sc->sa.agi_bp in AGI repair LOLLM noticed a longstanding bug where xrep_iunlink_walk_ondisk_bucket tries to walk ragi->sc->sa.agi_bp to rebuild the unlinked inode lists. Unfortunately, it's possible for agi_bp to be null if the buffer verifier fails, so we have to use ragi->agi_bp (which skips verifier checks) instead.

Affected products

• Linux Linux: from 6.10, before 6.12.105 (fixed in 6.12.105); from 6.13, before 6.18.46 (fixed in 6.18.46); from 6.19, before 7.1.10 (fixed in 7.1.10)

Published 2026-08-26. Last modified 2026-08-26.