xfs: fix ilock leak on error in xfs_dq_get_next_id
In the Linux kernel, the following vulnerability has been resolved: xfs: fix ilock leak on error in xfs_dq_get_next_id xfs_dq_get_next_id() takes the quota inode ILOCK before calling xfs_iread_extents(). If xfs_iread_extents() fails, the function returns immediately without releasing the lock, leaking the quota inode ILOCK. This can leave the quota inode locked and cause subsequent quota operations to hang. Fix this by jumping to a common unlock path on error instead of returning directly.
CVE-2026-80534
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:CVE-2026-80534
Kernel
Source reference: /affected/1/package/name
- Affected versions
- Not stated in this record
- Fixed versions
- 5.10.267
Source reference:
/affected/1/ranges5.15.217Source reference:
/affected/1/ranges6.1.184Source reference:
/affected/1/ranges6.6.153Source reference:
/affected/1/ranges6.12.105Source reference:
/affected/1/ranges6.18.46Source reference:
/affected/1/ranges7.1.10Source reference:
/affected/1/ranges - Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "bda250dbaf39f67f8910e183853e4e6a9e5ce899"
},
{
"fixed": "e4c05ebd01e910bccd4f7e9517c7353982e27763"
},
{
"fixed": "6401b99a285cd4cfb2949ba44675541b91ad7e4f"
},
{
"fixed": "0865e4fca02e418fd2423fae9a887dee87b778a1"
},
{
"fixed": "ed8bfb43de71213cfdbbe833b2c2817250e18b1a"
},
{
"fixed": "e270d539b8a2e0cb8f617fee47a7b083c0088361"
},
{
"fixed": "514a5d42d4188fc5f1499a8d654c717ebf981193"
},
{
"fixed": "08bed2b67d2ee79d3e138c344d8dcfa4c9b26a38"
},
{
"fixed": "63320a0f70f66f311f4bccff3af0719c2119f46c"
}
]
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80534.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.13.0"
},
{
"fixed": "5.10.267"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.217"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "6.1.184"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.2.0"
},
{
"fixed": "6.6.153"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.7.0"
},
{
"fixed": "6.12.105"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.13.0"
},
{
"fixed": "6.18.46"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.19.0"
},
{
"fixed": "7.1.10"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80534.json"
}
}
]- Related CVEs
- CVE-2026-80534
Source reference:
/id
Publisher severity
No explicit severity was provided.
- Event
- #50826 · Revision 1
- Added to Heist Feed
- Publisher date