SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-80529

UNKNOWN · CVSS N/A EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-08-26 · Last synced 2026-09-20

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's XFS file system, specifically in the handling of disk quota recovery, where errors in validating recovered disk quotas are improperly managed. This flaw allows corrupted quota information to be written back to disk, potentially leading to data integrity issues and incorrect quota enforcement. System administrators and developers using the XFS file system in Linux environments should prioritize addressing this vulnerability to prevent potential data corruption and ensure proper quota management.

CVE
CVE-2026-80529
Severity
UNKNOWN
CVSS
N/A
EPSS
0.17%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: xfs: don't swallow dquot recovery verification errors xlog_recover_dquot_commit_pass2() validates the recovered dquot with xfs_dqblk_verify() and, on failure, sets error = -EFSCORRUPTED and jumps to out_release. But out_release unconditionally returns 0, so the corruption error is discarded: the caller xlog_recover_items_pass2() sees success, log recovery proceeds as if the dquot were valid, and the corrupt quota buffer can be written back to disk.