CVE-2026-80534 - Vulnerability Details

- xfs: fix ilock leak on error in xfs_dq_get_next_id

Description

In the Linux kernel, the following vulnerability has been resolved:

xfs: fix ilock leak on error in xfs_dq_get_next_id

xfs_dq_get_next_id() takes the quota inode ILOCK before calling
xfs_iread_extents(). If xfs_iread_extents() fails, the function returns
immediately without releasing the lock, leaking the quota inode ILOCK.
This can leave the quota inode locked and cause subsequent quota
operations to hang.

Fix this by jumping to a common unlock path on error instead of returning
directly.

Published: 2026-08-26

Score: n/a

EPSS: n/a

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`bda250dbaf39f67f8910e183853e4e6a9e5ce899`	affected	< 6401b99a285cd4cfb2949ba44675541b91ad7e4f
`bda250dbaf39f67f8910e183853e4e6a9e5ce899`	affected	< 0865e4fca02e418fd2423fae9a887dee87b778a1
`bda250dbaf39f67f8910e183853e4e6a9e5ce899`	affected	< ed8bfb43de71213cfdbbe833b2c2817250e18b1a
`bda250dbaf39f67f8910e183853e4e6a9e5ce899`	affected	< e270d539b8a2e0cb8f617fee47a7b083c0088361
`bda250dbaf39f67f8910e183853e4e6a9e5ce899`	affected	< 514a5d42d4188fc5f1499a8d654c717ebf981193
`bda250dbaf39f67f8910e183853e4e6a9e5ce899`	affected	< 08bed2b67d2ee79d3e138c344d8dcfa4c9b26a38
`bda250dbaf39f67f8910e183853e4e6a9e5ce899`	affected	< 63320a0f70f66f311f4bccff3af0719c2119f46c

Linux

affected

Version	Status	Constraints
`4.13`	affected	—
`0`	unaffected	< 4.13
`5.15.217`	unaffected	≤ 5.15.*
`6.1.184`	unaffected	≤ 6.1.*
`6.6.153`	unaffected	≤ 6.6.*
`6.12.105`	unaffected	≤ 6.12.*
`6.18.46`	unaffected	≤ 6.18.*
`7.1.10`	unaffected	≤ 7.1.*
`7.2`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[bda250dbaf39f67f8910e183853e4e6a9e5ce899,6401b99a285cd4cfb2949ba44675541b91ad7e4f)`	affected	code_commit	—
`[bda250dbaf39f67f8910e183853e4e6a9e5ce899,0865e4fca02e418fd2423fae9a887dee87b778a1)`	affected	code_commit	—
`[bda250dbaf39f67f8910e183853e4e6a9e5ce899,ed8bfb43de71213cfdbbe833b2c2817250e18b1a)`	affected	code_commit	—
`[bda250dbaf39f67f8910e183853e4e6a9e5ce899,e270d539b8a2e0cb8f617fee47a7b083c0088361)`	affected	code_commit	—
`[bda250dbaf39f67f8910e183853e4e6a9e5ce899,514a5d42d4188fc5f1499a8d654c717ebf981193)`	affected	code_commit	—
`[bda250dbaf39f67f8910e183853e4e6a9e5ce899,08bed2b67d2ee79d3e138c344d8dcfa4c9b26a38)`	affected	code_commit	—
`[bda250dbaf39f67f8910e183853e4e6a9e5ce899,63320a0f70f66f311f4bccff3af0719c2119f46c)`	affected	code_commit	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`4.13`	affected	semver	—
`[0,4.13)`	unaffected	semver	—
`[5.15.217,5.16.0)`	unaffected	semver	—
`[6.1.184,6.2.0)`	unaffected	semver	—
`[6.6.153,6.7.0)`	unaffected	semver	—
`[6.12.105,6.13.0)`	unaffected	semver	—
`[6.18.46,6.19.0)`	unaffected	semver	—
`[7.1.10,7.2.0)`	unaffected	semver	—
`[7.2,*]`	unaffected	semver	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/0865e4fca02e418fd2423fae9a887dee87b778a1
https://git.kernel.org/stable/c/08bed2b67d2ee79d3e138c344d8dcfa4c9b26a38
https://git.kernel.org/stable/c/514a5d42d4188fc5f1499a8d654c717ebf981193
https://git.kernel.org/stable/c/63320a0f70f66f311f4bccff3af0719c2119f46c
https://git.kernel.org/stable/c/6401b99a285cd4cfb2949ba44675541b91ad7e4f
https://git.kernel.org/stable/c/e270d539b8a2e0cb8f617fee47a7b083c0088361
https://git.kernel.org/stable/c/ed8bfb43de71213cfdbbe833b2c2817250e18b1a

History

Wed, 26 Aug 2026 16:00:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-689

Wed, 26 Aug 2026 14:45:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: xfs: fix ilock leak on error in xfs_dq_get_next_id xfs_dq_get_next_id() takes the quota inode ILOCK before calling xfs_iread_extents(). If xfs_iread_extents() fails, the function returns immediately without releasing the lock, leaking the quota inode ILOCK. This can leave the quota inode locked and cause subsequent quota operations to hang. Fix this by jumping to a common unlock path on error instead of returning directly.
Title		xfs: fix ilock leak on error in xfs_dq_get_next_id
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/0865e4fca02e418fd2423fae9a887dee87b778a1 https://git.kernel.org/stable/c/08bed2b67d2ee79d3e138c344d8dcfa4c9b26a38 https://git.kernel.org/stable/c/514a5d42d4188fc5f1499a8d654c717ebf981193 https://git.kernel.org/stable/c/63320a0f70f66f311f4bccff3af0719c2119f46c https://git.kernel.org/stable/c/6401b99a285cd4cfb2949ba44675541b91ad7e4f https://git.kernel.org/stable/c/e270d539b8a2e0cb8f617fee47a7b083c0088361 https://git.kernel.org/stable/c/ed8bfb43de71213cfdbbe833b2c2817250e18b1a

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-26T14:37:10.378Z

Updated: 2026-08-26T14:37:10.378Z

Reserved: 2026-08-26T14:34:25.764Z

Link: CVE-2026-80534

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-08-26T15:17:07.530

Modified: 2026-08-26T15:17:07.530

Link: CVE-2026-80534

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-08-26T17:15:04Z

Weaknesses

CWE-689
Permission Race Condition During Resource Copy

Tracking

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object