---
id: CVE-2026-80534
title: 'xfs: fix ilock leak on error in xfs_dq_get_next_id'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  xfs: fix ilock leak on error in xfs_dq_get_next_id

  xfs_dq_get_next_id() takes the quota inode ILOCK before calling
  xfs_iread_extents().  If xfs_iread_extents() fails, …
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= bda250dbaf39f67f8910e183853e4e6a9e5ce899 <
    e4c05ebd01e910bccd4f7e9517c7353982e27763
  - >-
    Linux >= bda250dbaf39f67f8910e183853e4e6a9e5ce899 <
    6401b99a285cd4cfb2949ba44675541b91ad7e4f
  - >-
    Linux >= bda250dbaf39f67f8910e183853e4e6a9e5ce899 <
    0865e4fca02e418fd2423fae9a887dee87b778a1
  - >-
    Linux >= bda250dbaf39f67f8910e183853e4e6a9e5ce899 <
    ed8bfb43de71213cfdbbe833b2c2817250e18b1a
  - >-
    Linux >= bda250dbaf39f67f8910e183853e4e6a9e5ce899 <
    e270d539b8a2e0cb8f617fee47a7b083c0088361
  - >-
    Linux >= bda250dbaf39f67f8910e183853e4e6a9e5ce899 <
    514a5d42d4188fc5f1499a8d654c717ebf981193
  - >-
    Linux >= bda250dbaf39f67f8910e183853e4e6a9e5ce899 <
    08bed2b67d2ee79d3e138c344d8dcfa4c9b26a38
  - >-
    Linux >= bda250dbaf39f67f8910e183853e4e6a9e5ce899 <
    63320a0f70f66f311f4bccff3af0719c2119f46c
  - Linux 4.13
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T17:01:54.894586Z'
published: '2026-08-26'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T17:05:51.958Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-80534'
references:
  - url: 'https://git.kernel.org/stable/c/e4c05ebd01e910bccd4f7e9517c7353982e27763'
  - url: 'https://git.kernel.org/stable/c/6401b99a285cd4cfb2949ba44675541b91ad7e4f'
  - url: 'https://git.kernel.org/stable/c/0865e4fca02e418fd2423fae9a887dee87b778a1'
  - url: 'https://git.kernel.org/stable/c/ed8bfb43de71213cfdbbe833b2c2817250e18b1a'
  - url: 'https://git.kernel.org/stable/c/e270d539b8a2e0cb8f617fee47a7b083c0088361'
  - url: 'https://git.kernel.org/stable/c/514a5d42d4188fc5f1499a8d654c717ebf981193'
  - url: 'https://git.kernel.org/stable/c/08bed2b67d2ee79d3e138c344d8dcfa4c9b26a38'
  - url: 'https://git.kernel.org/stable/c/63320a0f70f66f311f4bccff3af0719c2119f46c'
tags:
  - cve.org
epss: 0.00177
epssPercentile: 0.07238
ingestedAt: '2026-11-06T18:00:12.541Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

xfs: fix ilock leak on error in xfs_dq_get_next_id

xfs_dq_get_next_id() takes the quota inode ILOCK before calling
xfs_iread_extents().  If xfs_iread_extents() fails, the function returns
immediately without releasing the lock, leaking the quota inode ILOCK.
This can leave the quota inode locked and cause subsequent quota
operations to hang.

Fix this by jumping to a common unlock path on error instead of returning
directly.

## Affected

- `Linux >= bda250dbaf39f67f8910e183853e4e6a9e5ce899 < e4c05ebd01e910bccd4f7e9517c7353982e27763`
- `Linux >= bda250dbaf39f67f8910e183853e4e6a9e5ce899 < 6401b99a285cd4cfb2949ba44675541b91ad7e4f`
- `Linux >= bda250dbaf39f67f8910e183853e4e6a9e5ce899 < 0865e4fca02e418fd2423fae9a887dee87b778a1`
- `Linux >= bda250dbaf39f67f8910e183853e4e6a9e5ce899 < ed8bfb43de71213cfdbbe833b2c2817250e18b1a`
- `Linux >= bda250dbaf39f67f8910e183853e4e6a9e5ce899 < e270d539b8a2e0cb8f617fee47a7b083c0088361`
- `Linux >= bda250dbaf39f67f8910e183853e4e6a9e5ce899 < 514a5d42d4188fc5f1499a8d654c717ebf981193`
- `Linux >= bda250dbaf39f67f8910e183853e4e6a9e5ce899 < 08bed2b67d2ee79d3e138c344d8dcfa4c9b26a38`
- `Linux >= bda250dbaf39f67f8910e183853e4e6a9e5ce899 < 63320a0f70f66f311f4bccff3af0719c2119f46c`
- `Linux 4.13`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.