What’s Vulnerable › Vulnerabilities

CVE-2026-80534: xfs: fix ilock leak on error in xfs_dq_get_next_id

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-26 · updated 2026-08-27

Description

In the Linux kernel, the following vulnerability has been resolved: xfs: fix ilock leak on error in xfs_dq_get_next_id xfs_dq_get_next_id() takes the quota inode ILOCK before calling xfs_iread_extents(). If xfs_iread_extents() fails, the function returns immediately without releasing the lock, leaking the quota inode ILOCK. This can leave the quota inode locked and cause subsequent quota operations to hang. Fix this by jumping to a common unlock path on error instead of returning directly.

Affected products

• Linux kernel: 4.13 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0865e4fca02e418fd2423fae9a887dee87b778a1
• https://git.kernel.org/stable/c/08bed2b67d2ee79d3e138c344d8dcfa4c9b26a38
• https://git.kernel.org/stable/c/514a5d42d4188fc5f1499a8d654c717ebf981193
• https://git.kernel.org/stable/c/63320a0f70f66f311f4bccff3af0719c2119f46c
• https://git.kernel.org/stable/c/6401b99a285cd4cfb2949ba44675541b91ad7e4f
• https://git.kernel.org/stable/c/e270d539b8a2e0cb8f617fee47a7b083c0088361
• https://git.kernel.org/stable/c/e4c05ebd01e910bccd4f7e9517c7353982e27763
• https://git.kernel.org/stable/c/ed8bfb43de71213cfdbbe833b2c2817250e18b1a

Get alerted when CVE-2026-80534 or the next vulnerability affects your stack