CVE-2026-80534 (GCVE-0-2026-80534)
Vulnerability from cvelistv5
Published
2026-08-26 14:37
Modified
2026-08-27 12:40
Severity ?
Summary
In the Linux kernel, the following vulnerability has been resolved: xfs: fix ilock leak on error in xfs_dq_get_next_id xfs_dq_get_next_id() takes the quota inode ILOCK before calling xfs_iread_extents(). If xfs_iread_extents() fails, the function returns immediately without releasing the lock, leaking the quota inode ILOCK. This can leave the quota inode locked and cause subsequent quota operations to hang. Fix this by jumping to a common unlock path on error instead of returning directly.
References
Impacted products
Vendor Product Version
Linux Linux Version: bda250dbaf39f67f8910e183853e4e6a9e5ce899
Version: bda250dbaf39f67f8910e183853e4e6a9e5ce899
Version: bda250dbaf39f67f8910e183853e4e6a9e5ce899
Version: bda250dbaf39f67f8910e183853e4e6a9e5ce899
Version: bda250dbaf39f67f8910e183853e4e6a9e5ce899
Version: bda250dbaf39f67f8910e183853e4e6a9e5ce899
Version: bda250dbaf39f67f8910e183853e4e6a9e5ce899
Version: bda250dbaf39f67f8910e183853e4e6a9e5ce899
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/xfs/xfs_dquot.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "e4c05ebd01e910bccd4f7e9517c7353982e27763",
              "status": "affected",
              "version": "bda250dbaf39f67f8910e183853e4e6a9e5ce899",
              "versionType": "git"
            },
            {
              "lessThan": "6401b99a285cd4cfb2949ba44675541b91ad7e4f",
              "status": "affected",
              "version": "bda250dbaf39f67f8910e183853e4e6a9e5ce899",
              "versionType": "git"
            },
            {
              "lessThan": "0865e4fca02e418fd2423fae9a887dee87b778a1",
              "status": "affected",
              "version": "bda250dbaf39f67f8910e183853e4e6a9e5ce899",
              "versionType": "git"
            },
            {
              "lessThan": "ed8bfb43de71213cfdbbe833b2c2817250e18b1a",
              "status": "affected",
              "version": "bda250dbaf39f67f8910e183853e4e6a9e5ce899",
              "versionType": "git"
            },
            {
              "lessThan": "e270d539b8a2e0cb8f617fee47a7b083c0088361",
              "status": "affected",
              "version": "bda250dbaf39f67f8910e183853e4e6a9e5ce899",
              "versionType": "git"
            },
            {
              "lessThan": "514a5d42d4188fc5f1499a8d654c717ebf981193",
              "status": "affected",
              "version": "bda250dbaf39f67f8910e183853e4e6a9e5ce899",
              "versionType": "git"
            },
            {
              "lessThan": "08bed2b67d2ee79d3e138c344d8dcfa4c9b26a38",
              "status": "affected",
              "version": "bda250dbaf39f67f8910e183853e4e6a9e5ce899",
              "versionType": "git"
            },
            {
              "lessThan": "63320a0f70f66f311f4bccff3af0719c2119f46c",
              "status": "affected",
              "version": "bda250dbaf39f67f8910e183853e4e6a9e5ce899",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/xfs/xfs_dquot.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.13"
            },
            {
              "lessThan": "4.13",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.267",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.217",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.184",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.153",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.105",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.46",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.1.*",
              "status": "unaffected",
              "version": "7.1.10",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.267",
                  "versionStartIncluding": "4.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.217",
                  "versionStartIncluding": "4.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.184",
                  "versionStartIncluding": "4.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.153",
                  "versionStartIncluding": "4.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.105",
                  "versionStartIncluding": "4.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.46",
                  "versionStartIncluding": "4.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1.10",
                  "versionStartIncluding": "4.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "4.13",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: fix ilock leak on error in xfs_dq_get_next_id\n\nxfs_dq_get_next_id() takes the quota inode ILOCK before calling\nxfs_iread_extents().  If xfs_iread_extents() fails, the function returns\nimmediately without releasing the lock, leaking the quota inode ILOCK.\nThis can leave the quota inode locked and cause subsequent quota\noperations to hang.\n\nFix this by jumping to a common unlock path on error instead of returning\ndirectly."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-27T12:40:03.205Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/e4c05ebd01e910bccd4f7e9517c7353982e27763"
        },
        {
          "url": "https://git.kernel.org/stable/c/6401b99a285cd4cfb2949ba44675541b91ad7e4f"
        },
        {
          "url": "https://git.kernel.org/stable/c/0865e4fca02e418fd2423fae9a887dee87b778a1"
        },
        {
          "url": "https://git.kernel.org/stable/c/ed8bfb43de71213cfdbbe833b2c2817250e18b1a"
        },
        {
          "url": "https://git.kernel.org/stable/c/e270d539b8a2e0cb8f617fee47a7b083c0088361"
        },
        {
          "url": "https://git.kernel.org/stable/c/514a5d42d4188fc5f1499a8d654c717ebf981193"
        },
        {
          "url": "https://git.kernel.org/stable/c/08bed2b67d2ee79d3e138c344d8dcfa4c9b26a38"
        },
        {
          "url": "https://git.kernel.org/stable/c/63320a0f70f66f311f4bccff3af0719c2119f46c"
        }
      ],
      "title": "xfs: fix ilock leak on error in xfs_dq_get_next_id",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-80534",
    "datePublished": "2026-08-26T14:37:10.378Z",
    "dateReserved": "2026-08-26T14:34:25.764Z",
    "dateUpdated": "2026-08-27T12:40:03.205Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.