vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-80535

xfs: don't double-lock when deleting a self-referential directory

N/A
Published: August 26, 2026 at 02:37 PM UTC
Updated: August 26, 2026 at 03:17 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: xfs: don't double-lock when deleting a self-referential directory LOLLM notices that the dirtree scrubber can detect a directory that refers to itself. In this case, it's not correct for the directory tree repair code to try to iolock/ilock both sc->ip and dp, because they're the same inode. Fix this by detecting that corner case and handling it appropriately.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
6.10 ≤ v < 6.12.1056.10 ≤ v < 6.18.466.10 ≤ v < 7.1.106.10 ≤ v < 7.23f31406aef493b3f19020909d29974e28253f91c6.10
Vendor states this is fixed in 17bc347cbdfb125eddac0a815b1f6c1f6eb56676 (fixed)
Vendor states this is fixed in 5fc643fb86599e29b38e7b2c2680b4b15bf8f772 (fixed)
Vendor states this is fixed in c575904471570e69bce40fa638365c6c0403e2ff (fixed)
Vendor states this is fixed in ce2a7006ec5ed88db1b1669124ec85bc1714ccaa (fixed)
Vendor states this is fixed in 6.10 (unaffected)
Vendor states this is fixed in 6.12.105 (unaffected)
Vendor states this is fixed in 6.18.46 (unaffected)
Vendor states this is fixed in 7.1.10 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (4)

Source: cverecord
https://git.kernel.org/stable/c/17bc347cbdfb125eddac0a815b1f6c1f6eb56676
Source: cverecord
https://git.kernel.org/stable/c/ce2a7006ec5ed88db1b1669124ec85bc1714ccaa
Source: cverecord
https://git.kernel.org/stable/c/c575904471570e69bce40fa638365c6c0403e2ff
Source: cverecord
https://git.kernel.org/stable/c/5fc643fb86599e29b38e7b2c2680b4b15bf8f772

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card