CVE-2026-80529
Received Received - Intake

XFS Quota Corruption Leading to Data Integrity Issues

Publication date: 2026-08-26

Last updated on: 2026-08-26

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: xfs: don't swallow dquot recovery verification errors xlog_recover_dquot_commit_pass2() validates the recovered dquot with xfs_dqblk_verify() and, on failure, sets error = -EFSCORRUPTED and jumps to out_release. But out_release unconditionally returns 0, so the corruption error is discarded: the caller xlog_recover_items_pass2() sees success, log recovery proceeds as if the dquot were valid, and the corrupt quota buffer can be written back to disk.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-26
Last Modified
2026-08-26
Generated
2026-08-26
AI Q&A
2026-08-26
EPSS Evaluated
N/A
NVD
CVE-2026-80529
EUVD
EUVD-2026-66444

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves incorrect error handling during quota recovery. When validating recovered disk quotas, the system fails to properly report corruption errors. Instead of returning the detected corruption, it discards the error and proceeds as if the data were valid, allowing corrupt quota data to be written back to disk.

Detection Guidance

This vulnerability is specific to the Linux kernel's XFS filesystem and relates to quota recovery errors. Detection requires checking kernel logs for XFS-related corruption errors or verifying if your system uses XFS with quota features enabled. Commands like dmesg | grep -i xfs or journalctl -k | grep -i xfs may help identify issues. Ensure your kernel version is updated to a patched release.

Impact Analysis

This could lead to filesystem corruption, data loss, or inconsistent quota enforcement. If quotas are corrupted, the system might incorrectly track disk usage, causing billing errors or denial of service. Malicious users could exploit this to bypass storage limits or hide usage.

Mitigation Strategies

Immediately update your Linux kernel to the latest stable version that includes the fix for this issue. If you cannot update immediately, disable XFS quota features as a temporary workaround. Monitor kernel logs for any signs of corruption or errors related to XFS quota recovery.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80529. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart