{"id":"CVE-2026-80529","title":"xfs: don't swallow dquot recovery verification errors","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: don't swallow dquot recovery verification errors\n\nxlog_recover_dquot_commit_pass2() validates the recovered dquot with\nxfs_dqblk_verify() and, on failure, sets err…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 7880b1f0adef4d363f42d6bb42aab3211291351b < e506e127fcb4e2bad1045805f1740b395eea9618","Linux >= 3581868f51a2edb027a898988b5b5a4ba379ee55 < 5b756fbb60b5d26063f46a11a3c7daa7eb616d79","Linux >= 9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 < a233b3362a3c7bf23f5143b4ef4b17ec337fcb4d","Linux >= 9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 < 38a4dbe588bd028a07a77dc5cee62ee3ce21e87d","Linux >= 9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 < 36a31b12540c0a0a3b77a01fda86de646f2961fb","Linux >= 9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 < e2b4a856085e9bd939bde2dee0d08b1d41babde9","Linux >= 6.1.128 < 6.1.184","Linux >= 6.6.17 < 6.6.153","Linux 6.7"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T17:01:47.270420Z"},"published":"2026-08-26","updated":"2026-11-06","sourceUpdated":"2026-11-06T17:05:51.813Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-80529","references":[{"url":"https://git.kernel.org/stable/c/e506e127fcb4e2bad1045805f1740b395eea9618"},{"url":"https://git.kernel.org/stable/c/5b756fbb60b5d26063f46a11a3c7daa7eb616d79"},{"url":"https://git.kernel.org/stable/c/a233b3362a3c7bf23f5143b4ef4b17ec337fcb4d"},{"url":"https://git.kernel.org/stable/c/38a4dbe588bd028a07a77dc5cee62ee3ce21e87d"},{"url":"https://git.kernel.org/stable/c/36a31b12540c0a0a3b77a01fda86de646f2961fb"},{"url":"https://git.kernel.org/stable/c/e2b4a856085e9bd939bde2dee0d08b1d41babde9"}],"tags":["cve.org"],"epss":0.00173,"epssPercentile":0.06716,"ingestedAt":"2026-11-06T18:00:12.540Z","slug":"CVE-2026-80529","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nxfs: don't swallow dquot recovery verification errors\n\nxlog_recover_dquot_commit_pass2() validates the recovered dquot with\nxfs_dqblk_verify() and, on failure, sets error = -EFSCORRUPTED and jumps\nto out_release.  But out_release unconditionally returns 0, so the\ncorruption error is discarded: the caller xlog_recover_items_pass2()\nsees success, log recovery proceeds as if the dquot were valid, and the\ncorrupt quota buffer can be written back to disk.\n\n## Affected\n\n- `Linux >= 7880b1f0adef4d363f42d6bb42aab3211291351b < e506e127fcb4e2bad1045805f1740b395eea9618`\n- `Linux >= 3581868f51a2edb027a898988b5b5a4ba379ee55 < 5b756fbb60b5d26063f46a11a3c7daa7eb616d79`\n- `Linux >= 9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 < a233b3362a3c7bf23f5143b4ef4b17ec337fcb4d`\n- `Linux >= 9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 < 38a4dbe588bd028a07a77dc5cee62ee3ce21e87d`\n- `Linux >= 9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 < 36a31b12540c0a0a3b77a01fda86de646f2961fb`\n- `Linux >= 9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 < e2b4a856085e9bd939bde2dee0d08b1d41babde9`\n- `Linux >= 6.1.128 < 6.1.184`\n- `Linux >= 6.6.17 < 6.6.153`\n- `Linux 6.7`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}