CVE-2026-80720

Received Received - Intake

Memory Leak in Linux Kernel iomap Subsystem

Publication date: 2026-08-28

Last updated on: 2026-08-29

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: iomap: add a separate bio_set for iomap_split_ioend iomap_split_ioend can split bios that already come from iomap_ioend_bioset and thus deadlock when the bioset is exhausted. Add a separate bio_set to avoid this deadlock. Christian Brauner <brauner@kernel.org> says: Mark iomap_ioend_split_bioset static as it is only used in ioend.c, fixing the sparse warning reported by the kernel test robot.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-28

Last Modified

2026-08-29

Generated

2026-09-17

AI Q&A

2026-08-28

EPSS Evaluated

2026-09-15

NVD

CVE-2026-80720

EUVD

EUVD-2026-67455

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a deadlock issue in the iomap subsystem. The iomap_split_ioend function can split bios that originate from iomap_ioend_bioset, leading to a deadlock when the bioset is exhausted. The fix adds a separate bio_set to prevent this deadlock.

Detection Guidance

This vulnerability is specific to the Linux kernel's iomap subsystem and may not have direct network detection methods. System administrators should check kernel logs for deadlock warnings or errors related to bio_set exhaustion in iomap operations. Commands like dmesg or journalctl may show relevant errors.

Impact Analysis

This vulnerability could cause system hangs or crashes if exploited, potentially leading to denial of service. Systems using the affected Linux kernel components may become unresponsive under specific conditions.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a Linux kernel issue related to bio_set management in the iomap subsystem, causing potential deadlocks under specific conditions. No evidence suggests it impacts data protection, privacy, or security controls required by these regulations.

Mitigation Strategies

Update the Linux kernel to a patched version that includes the fix for this vulnerability. Monitor kernel logs for any signs of deadlocks or bio_set exhaustion. If custom kernel modules are in use, ensure they are compatible with the updated iomap subsystem.

Hi! I’m here to help you understand CVE-2026-80720. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70