CVE-2026-80804
Received Received - Intake

XFS Filesystem Lock Dependency Vulnerability

Vulnerability report for CVE-2026-80804, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: xfs: restore nofs context unconditionally in xfs_trans_roll When __xfs_trans_commit() fails in xfs_trans_roll(), the NOFS context is cleared but only restored in the success path. This leaves the error path without nofs protection, causing a circular lock dependency between xfs_nondir_ilock_class and fs_reclaim: CPU0 CPU1 ---- ---- lock(&xfs_nondir_ilock_class); lock(fs_reclaim); lock(&xfs_nondir_ilock_class); lock(fs_reclaim); Fix this by moving xfs_trans_set_context() before the error check so that nofs context is always restored on the new transaction.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-04
Last Modified
2026-09-04
Generated
2026-09-04
AI Q&A
2026-09-04
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the Linux kernel's XFS file system. It involves a missing restoration of the NOFS context when a transaction roll fails. This can lead to a circular lock dependency between xfs_nondir_ilock_class and fs_reclaim, potentially causing system hangs or deadlocks.

Detection Guidance

This vulnerability is specific to the Linux kernel's XFS filesystem and may not have direct network detection methods. Monitor kernel logs for circular lock dependency warnings between xfs_nondir_ilock_class and fs_reclaim. Check for system hangs or crashes during XFS operations.

Impact Analysis

This vulnerability could cause system instability, including crashes or freezes, due to deadlocks. It may affect systems using the XFS file system, leading to data unavailability or corruption if not resolved.

Mitigation Strategies

Apply the latest Linux kernel patches that include the fix for this issue. If immediate patching is not possible, avoid using XFS filesystem operations that may trigger the vulnerability until the patch is applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80804. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart