CVE-2026-80534

Not scored yetLast modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

xfs: fix ilock leak on error in xfs_dq_get_next_id

xfs_dq_get_next_id() takes the quota inode ILOCK before calling xfs_iread_extents(). If xfs_iread_extents() fails, the function returns immediately without releasing the lock, leaking the quota inode ILOCK. This can leave the quota inode locked and cause subsequent quota operations to hang.

Fix this by jumping to a common unlock path on error instead of returning directly.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= bda250dbaf39f67f8910e183853e4e6a9e5ce899, < e4c05ebd01e910bccd4f7e9517c7353982e27763; >= bda250dbaf39f67f8910e183853e4e6a9e5ce899, < 6401b99a285cd4cfb2949ba44675541b91ad7e4f; >= bda250dbaf39f67f8910e183853e4e6a9e5ce899, < 0865e4fca02e418fd2423fae9a887dee87b778a1; >= bda250dbaf39f67f8910e183853e4e6a9e5ce899, < ed8bfb43de71213cfdbbe833b2c2817250e18b1a; >= bda250dbaf39f67f8910e183853e4e6a9e5ce899, < e270d539b8a2e0cb8f617fee47a7b083c0088361; >= bda250dbaf39f67f8910e183853e4e6a9e5ce899, < 514a5d42d4188fc5f1499a8d654c717ebf981193; >= bda250dbaf39f67f8910e183853e4e6a9e5ce899, < 08bed2b67d2ee79d3e138c344d8dcfa4c9b26a38; >= bda250dbaf39f67f8910e183853e4e6a9e5ce899, < 63320a0f70f66f311f4bccff3af0719c2119f46c
LinuxLinux4.13

References

Timeline

Published
Aug 26, 2026
Last modified
Nov 6, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-80535In the Linux kernel, the following vulnerability has been resolved: xfs: don't double-lock when deleting a self-referential directory LOLLCVE-2026-805368.4In the Linux kernel, the following vulnerability has been resolved: xfs: bounds-check buffer log item's dirty bitmap xlog_recover_do_reg_bCVE-2026-805377.8In the Linux kernel, the following vulnerability has been resolved: xfs: fix off-by-one in rtrefcount btree root level validation xfs_rtreCVE-2026-805387.1In the Linux kernel, the following vulnerability has been resolved: xfs: propagate errors from xfs_rtginode_load xfs_rtginode_ensure() treCVE-2026-80539In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: disallow multiple FENCE chunks in one submit amdgpu_cs_pasCVE-2026-805410.0Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in the Publish Audit API endpoints (/api/auditPublishinCVE-2026-805407.8In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD decode image min size calculation This needs to usCVE-2026-805417.8In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate GEM_CREATE domain combinations AMDGPU_GEM_CREATE CVE-2026-80542In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL pointer dereference in amdgpu_dm_crtc_set_vblCVE-2026-80543In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Pad trailing CCA or EP11 message with zeros The both funcCVE-2026-805447.8In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The CVE-2026-805457.8In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB length and overflow checks The xcrb_msg
CVE-2026-80534: Unscored | Vulnix