What’s Vulnerable › Vulnerabilities

CVE-2026-80720: iomap: add a separate bio_set for iomap_split_ioend

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-28 · updated 2026-08-29

Description

In the Linux kernel, the following vulnerability has been resolved: iomap: add a separate bio_set for iomap_split_ioend iomap_split_ioend can split bios that already come from iomap_ioend_bioset and thus deadlock when the bioset is exhausted. Add a separate bio_set to avoid this deadlock. Christian Brauner <brauner@kernel.org> says: Mark iomap_ioend_split_bioset static as it is only used in ioend.c, fixing the sparse warning reported by the kernel test robot.

Affected products

• Linux kernel: 6.15 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/4a869be56e9f6ce7462abcf324ebdefc5de051be
• https://git.kernel.org/stable/c/c679ce3be6cb63763d68ab9b5d9d73ddc0a40762
• https://git.kernel.org/stable/c/cfc686a1174aa904dcad9b9a7c5e46b484d27e4e

Get alerted when CVE-2026-80720 or the next vulnerability affects your stack