CVE-2026-80529

Summary

In the Linux kernel, the following vulnerability has been resolved:

xfs: don't swallow dquot recovery verification errors

xlog_recover_dquot_commit_pass2() validates the recovered dquot with xfs_dqblk_verify() and, on failure, sets error = -EFSCORRUPTED and jumps to out_release. But out_release unconditionally returns 0, so the corruption error is discarded: the caller xlog_recover_items_pass2() sees success, log recovery proceeds as if the dquot were valid, and the corrupt quota buffer can be written back to disk.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux7880b1f0adef4d363f42d6bb42aab3211291351b < e506e127fcb4e2bad1045805f1740b395eea9618affected
LinuxLinux3581868f51a2edb027a898988b5b5a4ba379ee55 < 5b756fbb60b5d26063f46a11a3c7daa7eb616d79affected
LinuxLinux9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 < a233b3362a3c7bf23f5143b4ef4b17ec337fcb4daffected
LinuxLinux9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 < 38a4dbe588bd028a07a77dc5cee62ee3ce21e87daffected
LinuxLinux9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 < 36a31b12540c0a0a3b77a01fda86de646f2961fbaffected
LinuxLinux9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 < e2b4a856085e9bd939bde2dee0d08b1d41babde9affected
LinuxLinux6.1.128 < 6.1.184affected
LinuxLinux6.6.17 < 6.6.153affected
LinuxLinux6.7affected
LinuxLinux0 < 6.7unaffected
LinuxLinux6.1.184 <= 6.1.*unaffected
LinuxLinux6.6.153 <= 6.6.*unaffected
LinuxLinux6.12.105 <= 6.12.*unaffected
LinuxLinux6.18.46 <= 6.18.*unaffected
LinuxLinux7.1.10 <= 7.1.*unaffected
LinuxLinux7.2 <= *unaffected

Weaknesses

References