Answer in brief
CVE-2026-80529 records a Unknown severity vulnerability in xfs: don't swallow dquot recovery verification errors. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=7880b1f0adef4d363f42d6bb42aab3211291351b <e506e127fcb4e2bad1045805f1740b395eea9618 || >=3581868f51a2edb027a898988b5b5a4ba379ee55 <5b756fbb60b5d26063f46a11a3c7daa7eb616d79 || >=9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 <a233b3362a3c7bf23f5143b4ef4b17ec337fcb4d || >=9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 <38a4dbe588bd028a07a77dc5cee62ee3ce21e87d || >=9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 <36a31b12540c0a0a3b77a01fda86de646f2961fb || >=9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 <e2b4a856085e9bd939bde2dee0d08b1d41babde9 || >=6.1.128 <6.1.184 || >=6.6.17 <6.6.153 | e506e127fcb4e2bad1045805f1740b395eea9618, 5b756fbb60b5d26063f46a11a3c7daa7eb616d79, a233b3362a3c7bf23f5143b4ef4b17ec337fcb4d, 38a4dbe588bd028a07a77dc5cee62ee3ce21e87d, 36a31b12540c0a0a3b77a01fda86de646f2961fb, e2b4a856085e9bd939bde2dee0d08b1d41babde9, 6.1.184, 6.6.153 |
| Linux/Linuxgeneric | 6.7 | Not reported |
Published upstream
Aug 26, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 26, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 26, 2026
In the Linux kernel, the following vulnerability has been resolved: xfs: don't swallow dquot recovery verification errors xlog_recover_dquot_commit_pass2() validates the recovered dquot with xfs_dqblk_verify() and, on failure, sets error = -EFSCORRUPTED and jumps to out_release. But out_release unconditionally returns 0, so the corruption error is discarded: the caller xlog_recover_items_pass2() sees success, log recovery proceeds as if the dquot were valid, and the corrupt quota buffer can be written back to disk.
Quoted source text, attributed separately from HOL analysis.