CVE-2025-68820

EUVD-2026-2264
In the Linux kernel, the following vulnerability has been resolved:

ext4: xattr: fix null pointer deref in ext4_raw_inode()

If ext4_get_inode_loc() fails (e.g. if it returns -EFSCORRUPTED),
iloc.bh will remain set to NULL. Since ext4_xattr_inode_dec_ref_all()
lacks error checking, this will lead to a null pointer dereference
in ext4_raw_inode(), called right after ext4_get_inode_loc().

Found by Linux Verification Center (linuxtesting.org) with SVACE.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
UNKNOWN
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 21%
Debian logo
Debian Releases
Debian Product
Codename
linux
bookworm
6.1.170-3
fixed
bookworm (security)
6.1.172-1
fixed
bullseye
vulnerable
bullseye (security)
5.10.251-5
fixed
forky
7.0.9-1
fixed
sid
7.0.9-1
fixed
trixie
6.12.86-1
fixed
trixie (security)
6.12.90-1
fixed
linux-6.1
bullseye (security)
6.1.172-1~deb11u1
fixed
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
kernel-64kb
suse enterprise desktop 15 SP7
6.4.0-150700.53.31.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.31.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.31.1
fixed
kernel-azure
suse enterprise sap 15 SP7
6.4.0-150700.20.27.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.20.27.1
fixed
kernel-default
suse enterprise desktop 15 SP7
6.4.0-150700.53.31.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.31.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.31.1
fixed
kernel-default-base
suse enterprise desktop 15 SP7
6.4.0-150700.53.31.1.150700.17.21.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.31.1.150700.17.21.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.31.1.150700.17.21.1
fixed
kernel-docs
suse enterprise desktop 15 SP7
6.4.0-150700.53.31.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.31.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.31.1
fixed
kernel-macros
suse enterprise desktop 15 SP7
6.4.0-150700.53.31.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.31.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.31.1
fixed
kernel-obs-build
suse enterprise desktop 15 SP7
6.4.0-150700.53.31.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.31.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.31.1
fixed
kernel-source
suse enterprise desktop 15 SP7
6.4.0-150700.53.31.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.31.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.31.1
fixed
kernel-source-azure
suse enterprise sap 15 SP7
6.4.0-150700.20.27.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.20.27.1
fixed
kernel-syms
suse enterprise desktop 15 SP7
6.4.0-150700.53.31.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.31.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.31.1
fixed
kernel-syms-azure
suse enterprise sap 15 SP7
6.4.0-150700.20.27.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.20.27.1
fixed
kernel-zfcpdump
suse enterprise desktop 15 SP7
6.4.0-150700.53.31.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.31.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.31.1
fixed