Bug 2524514 (CVE-2026-80534) - CVE-2026-80534 kernel: xfs: fix ilock leak on error in xfs_dq_get_next_id
Summary: CVE-2026-80534 kernel: xfs: fix ilock leak on error in xfs_dq_get_next_id
Keywords:
Status: NEW
Alias: CVE-2026-80534
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-08-26 15:04 UTC by OSIDB Bzimport
Modified: 2026-08-27 03:03 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-08-26 15:04:56 UTC 
In the Linux kernel, the following vulnerability has been resolved:

xfs: fix ilock leak on error in xfs_dq_get_next_id

xfs_dq_get_next_id() takes the quota inode ILOCK before calling
xfs_iread_extents().  If xfs_iread_extents() fails, the function returns
immediately without releasing the lock, leaking the quota inode ILOCK.
This can leave the quota inode locked and cause subsequent quota
operations to hang.

Fix this by jumping to a common unlock path on error instead of returning
directly.
Comment 1 Mauro Matteo Cascella 2026-08-26 17:08:18 UTC 
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2026082604-CVE-2026-80534-b7cd@gregkh/T
Note You need to log in before you can comment on or make changes to this bug.