Skip to content
Heist/ feed
Back to feed
HighFix available

iomap: add a separate bio_set for iomap_split_ioend

Type: advisorySources: OSV

In the Linux kernel, the following vulnerability has been resolved: iomap: add a separate bio_set for iomap_split_ioend iomap_split_ioend can split bios that already come from iomap_ioend_bioset and thus deadlock when the bioset is exhausted. Add a separate bio_set to avoid this deadlock. Christian Brauner says: Mark iomap_ioend_split_bioset static as it is only used in ioend.c, fixing the sparse warning reported by the kernel test robot.

Products
Kernel
Affected versions
Not specified
Fixed versions
6.18.44, 7.1.8
CVEs
CVE-2026-80720
Confirmed fixed CVEs
Not specified
Updated in this feed
3 Nov 2026, 14:28 UTC · Revision 1

Source evidence

iomap: add a separate bio_set for iomap_split_ioend

core-osv · Original source

Published 28 Aug 2026, 06:53 UTC

In the Linux kernel, the following vulnerability has been resolved: iomap: add a separate bio_set for iomap_split_ioend iomap_split_ioend can split bios that already come from iomap_ioend_bioset and thus deadlock when the bioset is exhausted. Add a separate bio_set to avoid this deadlock. Christian Brauner says: Mark iomap_ioend_split_bioset static as it is only used in ioend.c, fixing the sparse warning reported by the kernel test robot.

osv:CVE-2026-80720

Kernel

Fixed versions: 6.18.44, 7.1.8

Complete source record
{
  "id": "d3b1838ce6a22874be76d5a310071c7df26b564e18f9241e8bc975ba6797bb86",
  "url": "https://osv.dev/vulnerability/CVE-2026-80720",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "iomap: add a separate bio_set for iomap_split_ioend",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: iomap: add a separate bio_set for iomap_split_ioend iomap_split_ioend can split bios that already come from iomap_ioend_bioset and thus deadlock when the bioset is exhausted. Add a separate bio_set to avoid this deadlock. Christian Brauner says: Mark iomap_ioend_split_bioset static as it is only used in ioend.c, fixing the sparse warning reported by the kernel test robot.",
    "evidence": "osv:CVE-2026-80720",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "6.18.44",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "7.1.8",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "high",
    "structured": {
      "id": "CVE-2026-80720",
      "aliases": [
        "CVE-2026-80720"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "5fcbd555d48390a8c819ba7fdf55fbfcabe05c80"
                },
                {
                  "fixed": "cfc686a1174aa904dcad9b9a7c5e46b484d27e4e"
                },
                {
                  "fixed": "4a869be56e9f6ce7462abcf324ebdefc5de051be"
                },
                {
                  "fixed": "c679ce3be6cb63763d68ab9b5d9d73ddc0a40762"
                }
              ]
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80720.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.15.0"
                },
                {
                  "fixed": "6.18.44"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.19.0"
                },
                {
                  "fixed": "7.1.8"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80720.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:29.411847585Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/4a869be56e9f6ce7462abcf324ebdefc5de051be",
        "https://git.kernel.org/stable/c/c679ce3be6cb63763d68ab9b5d9d73ddc0a40762",
        "https://git.kernel.org/stable/c/cfc686a1174aa904dcad9b9a7c5e46b484d27e4e",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80720.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-80720",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80720.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2026-80720",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 496377,
  "published_at": "2026-08-28T06:53:16.683+00:00"
}