Skip to content
Heist/ feed
UnratedFix available

xfs: don't swallow dquot recovery verification errors

Type: advisorySource: OSV1 source record

In the Linux kernel, the following vulnerability has been resolved: xfs: don't swallow dquot recovery verification errors xlog_recover_dquot_commit_pass2() validates the recovered dquot with xfs_dqblk_verify() and, on failure, sets error = -EFSCORRUPTED and jumps to out_release. But out_release unconditionally returns 0, so the corruption error is discarded: the caller xlog_recover_items_pass2() sees success, log recovery proceeds as if the dquot were valid, and the corrupt quota buffer can be written back to disk.

Announced Source revision 1
Original source ↗

CVE-2026-80529

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:CVE-2026-80529

Kernel

Source reference: /affected/1/package/name

Affected versions
Not stated in this record
Fixed versions
6.1.184

Source reference: /affected/1/ranges

6.6.153

Source reference: /affected/1/ranges

6.12.105

Source reference: /affected/1/ranges

6.18.46

Source reference: /affected/1/ranges

7.1.10

Source reference: /affected/1/ranges

Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "ranges": [
      {
        "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
        "type": "GIT",
        "events": [
          {
            "introduced": "7880b1f0adef4d363f42d6bb42aab3211291351b"
          },
          {
            "fixed": "e506e127fcb4e2bad1045805f1740b395eea9618"
          }
        ]
      },
      {
        "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
        "type": "GIT",
        "events": [
          {
            "introduced": "3581868f51a2edb027a898988b5b5a4ba379ee55"
          },
          {
            "fixed": "5b756fbb60b5d26063f46a11a3c7daa7eb616d79"
          }
        ]
      },
      {
        "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
        "type": "GIT",
        "events": [
          {
            "introduced": "9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02"
          },
          {
            "fixed": "a233b3362a3c7bf23f5143b4ef4b17ec337fcb4d"
          },
          {
            "fixed": "38a4dbe588bd028a07a77dc5cee62ee3ce21e87d"
          },
          {
            "fixed": "36a31b12540c0a0a3b77a01fda86de646f2961fb"
          },
          {
            "fixed": "e2b4a856085e9bd939bde2dee0d08b1d41babde9"
          }
        ]
      },
      {
        "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
        "type": "GIT",
        "events": [
          {
            "introduced": "6.1.128"
          },
          {
            "fixed": "6.1.184"
          }
        ]
      },
      {
        "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
        "type": "GIT",
        "events": [
          {
            "introduced": "6.6.17"
          },
          {
            "fixed": "6.6.153"
          }
        ]
      }
    ],
    "versions": [
      "v6.1.183",
      "v6.1.182",
      "v6.1.181",
      "v6.1.180",
      "v6.1.179",
      "v6.1.178",
      "v6.1.177",
      "v6.1.176",
      "v6.1.175",
      "v6.1.174",
      "v6.1.173",
      "v6.1.172",
      "v6.1.171",
      "v6.1.170",
      "v6.1.169",
      "v6.1.168",
      "v6.1.167",
      "v6.1.166",
      "v6.1.165",
      "v6.1.164",
      "v6.1.163",
      "v6.1.162",
      "v6.1.161",
      "v6.1.160",
      "v6.1.159",
      "v6.1.158",
      "v6.1.157",
      "v6.1.156",
      "v6.1.155",
      "v6.1.154",
      "v6.1.153",
      "v6.1.152",
      "v6.1.151",
      "v6.1.150",
      "v6.1.149",
      "v6.1.148",
      "v6.1.147",
      "v6.1.146",
      "v6.1.145",
      "v6.1.144",
      "v6.1.143",
      "v6.1.142",
      "v6.1.141",
      "v6.1.140",
      "v6.1.139",
      "v6.1.138",
      "v6.1.137",
      "v6.1.136",
      "v6.1.135",
      "v6.1.134",
      "v6.1.133",
      "v6.1.132",
      "v6.1.131",
      "v6.1.130",
      "v6.1.129",
      "v6.1.128",
      "v6.6.152",
      "v6.6.151",
      "v6.6.150",
      "v6.6.149",
      "v6.6.148",
      "v6.6.147",
      "v6.6.146",
      "v6.6.145",
      "v6.6.144",
      "v6.6.143",
      "v6.6.142",
      "v6.6.141",
      "v6.6.140",
      "v6.6.139",
      "v6.6.138",
      "v6.6.137",
      "v6.6.136",
      "v6.6.135",
      "v6.6.134",
      "v6.6.133",
      "v6.6.132",
      "v6.6.131",
      "v6.6.130",
      "v6.6.129",
      "v6.6.128",
      "v6.6.127",
      "v6.6.126",
      "v6.6.125",
      "v6.6.124",
      "v6.6.123",
      "v6.6.122",
      "v6.6.121",
      "v6.6.120",
      "v6.6.119",
      "v6.6.118",
      "v6.6.117",
      "v6.6.116",
      "v6.6.115",
      "v6.6.114",
      "v6.6.113",
      "v6.6.112",
      "v6.6.111",
      "v6.6.110",
      "v6.6.109",
      "v6.6.108",
      "v6.6.107",
      "v6.6.106",
      "v6.6.105",
      "v6.6.104",
      "v6.6.103",
      "v6.6.102",
      "v6.6.101",
      "v6.6.100",
      "v6.6.99",
      "v6.6.98",
      "v6.6.97",
      "v6.6.96",
      "v6.6.95",
      "v6.6.94",
      "v6.6.93",
      "v6.6.92",
      "v6.6.91",
      "v6.6.90",
      "v6.6.89",
      "v6.6.88",
      "v6.6.87",
      "v6.6.86",
      "v6.6.85",
      "v6.6.84",
      "v6.6.83",
      "v6.6.82",
      "v6.6.81",
      "v6.6.80",
      "v6.6.79",
      "v6.6.78",
      "v6.6.77",
      "v6.6.76",
      "v6.6.75",
      "v6.6.74",
      "v6.6.73",
      "v6.6.72",
      "v6.6.71",
      "v6.6.70",
      "v6.6.69",
      "v6.6.68",
      "v6.6.67",
      "v6.6.66",
      "v6.6.65",
      "v6.6.64",
      "v6.6.63",
      "v6.6.62",
      "v6.6.61",
      "v6.6.60",
      "v6.6.59",
      "v6.6.58",
      "v6.6.57",
      "v6.6.56",
      "v6.6.55",
      "v6.6.54",
      "v6.6.53",
      "v6.6.52",
      "v6.6.51",
      "v6.6.50",
      "v6.6.49",
      "v6.6.48",
      "v6.6.47",
      "v6.6.46",
      "v6.6.45",
      "v6.6.44",
      "v6.6.43",
      "v6.6.42",
      "v6.6.41",
      "v6.6.40",
      "v6.6.39",
      "v6.6.38",
      "v6.6.37",
      "v6.6.36",
      "v6.6.35",
      "v6.6.34",
      "v6.6.33",
      "v6.6.32",
      "v6.6.31",
      "v6.6.30",
      "v6.6.29",
      "v6.6.28",
      "v6.6.27",
      "v6.6.26",
      "v6.6.25",
      "v6.6.24",
      "v6.6.23",
      "v6.6.22",
      "v6.6.21",
      "v6.6.20",
      "v6.6.19",
      "v6.6.18",
      "v6.6.17"
    ],
    "database_specific": {
      "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80529.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "6.1.184"
          }
        ]
      },
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "6.2.0"
          },
          {
            "fixed": "6.6.153"
          }
        ]
      },
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "6.7.0"
          },
          {
            "fixed": "6.12.105"
          },
          {
            "fixed": "6.18.46"
          }
        ]
      },
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "6.13.0"
          },
          {
            "fixed": "7.1.10"
          }
        ]
      }
    ],
    "package": {
      "name": "Kernel",
      "ecosystem": "Linux"
    },
    "database_specific": {
      "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80529.json"
    }
  }
]
Related CVEs
CVE-2026-80529

Source reference: /id

Publisher severity

No explicit severity was provided.

Event
#50691 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement