CVE-2026-80529None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: xfs: don't swallow dquot recovery verification errors xlog_recover_dquot_commit_pass2() validates the recovered dquot with xfs_dqblk_verify() and, on failure, sets err…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Nov 6.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
In the Linux kernel, the following vulnerability has been resolved:
xfs: don't swallow dquot recovery verification errors
xlog_recover_dquot_commit_pass2() validates the recovered dquot with xfs_dqblk_verify() and, on failure, sets error = -EFSCORRUPTED and jumps to out_release. But out_release unconditionally returns 0, so the corruption error is discarded: the caller xlog_recover_items_pass2() sees success, log recovery proceeds as if the dquot were valid, and the corrupt quota buffer can be written back to disk.
Linux >= 7880b1f0adef4d363f42d6bb42aab3211291351b < e506e127fcb4e2bad1045805f1740b395eea9618Linux >= 3581868f51a2edb027a898988b5b5a4ba379ee55 < 5b756fbb60b5d26063f46a11a3c7daa7eb616d79Linux >= 9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 < a233b3362a3c7bf23f5143b4ef4b17ec337fcb4dLinux >= 9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 < 38a4dbe588bd028a07a77dc5cee62ee3ce21e87dLinux >= 9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 < 36a31b12540c0a0a3b77a01fda86de646f2961fbLinux >= 9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 < e2b4a856085e9bd939bde2dee0d08b1d41babde9Linux >= 6.1.128 < 6.1.184Linux >= 6.6.17 < 6.6.153Linux 6.7Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99284Nonenet: skbuff: propagate shared-frag marker in skb_zerocopy()
CVE-2026-99283Nonenetfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
CVE-2026-99272Nonesmb: client: validate the data area in SMB2_read()
CVE-2026-99271NoneALSA: line6: Clear prev_fbuf on capture buffer release
CVE-2026-99273Noneksmbd: reserve space for the UTF-16 terminator in stream info
CVE-2026-99275Nonesmb: client: reject short SESSION_SETUP responses