PT-2026-82145

CVE-2026-80529

·

Published

2026-08-26

·

Updated

2026-10-17

Description by

CVSS 3.1
10
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the XFS file system where the xlog recover dquot commit pass2() function fails to properly handle errors during dquot recovery verification. When xfs dqblk verify() detects corruption, the error is set to -EFSCORRUPTED, but the subsequent jump to out release unconditionally returns 0. This causes the caller xlog recover items pass2() to perceive the operation as successful, allowing log recovery to proceed and potentially writing the corrupt quota buffer back to the disk.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
AZL-97811
CLSA-2026-1789898700
CLSA-2026-1792239979
OESA-2026-3707
OESA-2026-3708
OPENSUSE-SU-2026:21910-1
SUSE-SU-2026:23477-1
SUSE-SU-2026:23481-1
SUSE-SU-2026:23528-1
SUSE-SU-2026:23529-1
SUSE-SU-2026:23881-1
SUSE-SU-2026:23887-1
SUSE-SU-2026:23897-1
SUSE-SU-2026:23902-1
SUSE-SU-2026:4120-1
SUSE-SU-2026:4254-1
Found an issue in the description? Have something to add? Feel free to write us 👾