CVE-2026-80535
Received Received - Intake

XFS Filesystem Directory Self-Reference Deadlock

Publication date: 2026-08-26

Last updated on: 2026-08-26

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: xfs: don't double-lock when deleting a self-referential directory LOLLM notices that the dirtree scrubber can detect a directory that refers to itself. In this case, it's not correct for the directory tree repair code to try to iolock/ilock both sc->ip and dp, because they're the same inode. Fix this by detecting that corner case and handling it appropriately.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-26
Last Modified
2026-08-26
Generated
2026-09-16
AI Q&A
2026-08-26
EPSS Evaluated
2026-09-14
NVD
CVE-2026-80535
EUVD
EUVD-2026-66450

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a scenario where a directory refers to itself, causing the directory tree repair code to incorrectly attempt to lock the same inode twice. The fix prevents this double-locking issue by detecting and handling the self-referential directory case properly.

Detection Guidance

This vulnerability is specific to the XFS filesystem in the Linux kernel and involves a self-referential directory scenario. Detection would typically require examining filesystem logs or running XFS-specific diagnostic tools like xfs_repair or xfs_db. Check for filesystem errors or warnings in system logs that may indicate directory corruption.

Impact Analysis

This vulnerability could lead to system instability or crashes if exploited, as improper locking of inodes may cause deadlocks or corruption in the XFS filesystem. Users running affected Linux kernel versions may experience filesystem errors or data loss.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA. It is a Linux kernel issue related to directory handling that could lead to system instability or crashes but does not involve data breaches or unauthorized access.

Mitigation Strategies

Update the Linux kernel to the latest patched version to resolve this vulnerability. Monitor kernel logs for directory tree corruption issues or self-referential directory errors.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80535. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart