CVE-2026-80529
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: xfs: don't swallow dquot recovery verification errors xlog_recover_dquot_commit_pass2() validates the recovered dquot with xfs_dqblk_verify() and, on failure, sets error = -EFSCORRUPTED and jumps to out_release. But out_release unconditionally returns 0, so the corruption error is discarded: the caller xlog_recover_items_pass2() sees success, log recovery proceeds as if the dquot were valid, and the corrupt quota buffer can be written back to disk.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedAug 26, 2026
First seenAug 26, 2026
How to fix
Update
- Linux Linuxe506e127fcb4e2bad1045805f1740b395eea9618, 5b756fbb60b5d26063f46a11a3c7daa7eb616d79, a233b3362a3c7bf23f5143b4ef4b17ec337fcb4d, 38a4dbe588bd028a07a77dc5cee62ee3ce21e87d, 36a31b12540c0a0a3b77a01fda86de646f2961fb, e2b4a856085e9bd939bde2dee0d08b1d41babde9, 6.1.184, 6.6.153 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 7880b1f0adef4d363f42d6bb42aab3211291351b ≤ v < e506e127fcb4e2bad1045805f1740b395eea9618, 3581868f51a2edb027a898988b5b5a4ba379ee55 ≤ v < 5b756fbb60b5d26063f46a11a3c7daa7eb616d79, 9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 ≤ v < a233b3362a3c7bf23f5143b4ef4b17ec337fcb4d, 9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 ≤ v < 38a4dbe588bd028a07a77dc5cee62ee3ce21e87d, 9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 ≤ v < 36a31b12540c0a0a3b77a01fda86de646f2961fb, 9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 ≤ v < e2b4a856085e9bd939bde2dee0d08b1d41babde9, 6.1.128 ≤ v < 6.1.184, 6.6.17 ≤ v < 6.6.153, 6.7 | e506e127fcb4e2bad1045805f1740b395eea9618, 5b756fbb60b5d26063f46a11a3c7daa7eb616d79, a233b3362a3c7bf23f5143b4ef4b17ec337fcb4d, 38a4dbe588bd028a07a77dc5cee62ee3ce21e87d, 36a31b12540c0a0a3b77a01fda86de646f2961fb, e2b4a856085e9bd939bde2dee0d08b1d41babde9, 6.1.184, 6.6.153 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.