---
id: CVE-2026-80529
title: 'xfs: don''t swallow dquot recovery verification errors'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  xfs: don't swallow dquot recovery verification errors

  xlog_recover_dquot_commit_pass2() validates the recovered dquot with
  xfs_dqblk_verify() and, on failure, sets err…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 7880b1f0adef4d363f42d6bb42aab3211291351b <
    e506e127fcb4e2bad1045805f1740b395eea9618
  - >-
    Linux >= 3581868f51a2edb027a898988b5b5a4ba379ee55 <
    5b756fbb60b5d26063f46a11a3c7daa7eb616d79
  - >-
    Linux >= 9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 <
    a233b3362a3c7bf23f5143b4ef4b17ec337fcb4d
  - >-
    Linux >= 9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 <
    38a4dbe588bd028a07a77dc5cee62ee3ce21e87d
  - >-
    Linux >= 9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 <
    36a31b12540c0a0a3b77a01fda86de646f2961fb
  - >-
    Linux >= 9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 <
    e2b4a856085e9bd939bde2dee0d08b1d41babde9
  - Linux >= 6.1.128 < 6.1.184
  - Linux >= 6.6.17 < 6.6.153
  - Linux 6.7
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T17:01:47.270420Z'
published: '2026-08-26'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T17:05:51.813Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-80529'
references:
  - url: 'https://git.kernel.org/stable/c/e506e127fcb4e2bad1045805f1740b395eea9618'
  - url: 'https://git.kernel.org/stable/c/5b756fbb60b5d26063f46a11a3c7daa7eb616d79'
  - url: 'https://git.kernel.org/stable/c/a233b3362a3c7bf23f5143b4ef4b17ec337fcb4d'
  - url: 'https://git.kernel.org/stable/c/38a4dbe588bd028a07a77dc5cee62ee3ce21e87d'
  - url: 'https://git.kernel.org/stable/c/36a31b12540c0a0a3b77a01fda86de646f2961fb'
  - url: 'https://git.kernel.org/stable/c/e2b4a856085e9bd939bde2dee0d08b1d41babde9'
tags:
  - cve.org
epss: 0.00173
epssPercentile: 0.06716
ingestedAt: '2026-11-06T18:00:12.540Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

xfs: don't swallow dquot recovery verification errors

xlog_recover_dquot_commit_pass2() validates the recovered dquot with
xfs_dqblk_verify() and, on failure, sets error = -EFSCORRUPTED and jumps
to out_release.  But out_release unconditionally returns 0, so the
corruption error is discarded: the caller xlog_recover_items_pass2()
sees success, log recovery proceeds as if the dquot were valid, and the
corrupt quota buffer can be written back to disk.

## Affected

- `Linux >= 7880b1f0adef4d363f42d6bb42aab3211291351b < e506e127fcb4e2bad1045805f1740b395eea9618`
- `Linux >= 3581868f51a2edb027a898988b5b5a4ba379ee55 < 5b756fbb60b5d26063f46a11a3c7daa7eb616d79`
- `Linux >= 9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 < a233b3362a3c7bf23f5143b4ef4b17ec337fcb4d`
- `Linux >= 9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 < 38a4dbe588bd028a07a77dc5cee62ee3ce21e87d`
- `Linux >= 9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 < 36a31b12540c0a0a3b77a01fda86de646f2961fb`
- `Linux >= 9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 < e2b4a856085e9bd939bde2dee0d08b1d41babde9`
- `Linux >= 6.1.128 < 6.1.184`
- `Linux >= 6.6.17 < 6.6.153`
- `Linux 6.7`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.