xfs: fix ilock leak on error in xfs_dq_get_next_id (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.18 % · centile 7 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Received
Rechercher sur…
Description
In the Linux kernel, the following vulnerability has been resolved: xfs: fix ilock leak on error in xfs_dq_get_next_id xfs_dq_get_next_id() takes the quota inode ILOCK before calling xfs_iread_extents(). If xfs_iread_extents() fails, the function returns immediately without releasing the lock, leaking the quota inode ILOCK. This can leave the quota inode locked and cause subsequent quota operations to hang. Fix this by jumping to a common unlock path on error instead of returning directly.
Références
- https://git.kernel.org/stable/c/e4c05ebd01e910bccd4f7e9517c7353982e27763
- https://git.kernel.org/stable/c/6401b99a285cd4cfb2949ba44675541b91ad7e4f
- https://git.kernel.org/stable/c/0865e4fca02e418fd2423fae9a887dee87b778a1
- https://git.kernel.org/stable/c/ed8bfb43de71213cfdbbe833b2c2817250e18b1a
- https://git.kernel.org/stable/c/e270d539b8a2e0cb8f617fee47a7b083c0088361
- https://git.kernel.org/stable/c/514a5d42d4188fc5f1499a8d654c717ebf981193
- https://git.kernel.org/stable/c/08bed2b67d2ee79d3e138c344d8dcfa4c9b26a38
- https://git.kernel.org/stable/c/63320a0f70f66f311f4bccff3af0719c2119f46c
Références européennes
- ENISA EUVD · EUVD-2026-66449
- GCVE · GCVE-0-2026-80534
Avis du CERT-FR
- CERTFR-2026-AVI-1255 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1232 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1231 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1202 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1164 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1163 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected bda250dbaf39f67f8910e183853e4e6a9e5ce899 < e4c05ebd01e910bccd4f7e9517c7353982e27763 ; affected bda250dbaf39f67f8910e183853e4e6a9e5ce899 < 6401b99a285cd4cfb2949ba44675541b91ad7e4f ; affected bda250dbaf39f67f8910e183853e4e6a9e5ce899 < 0865e4fca02e418fd2423fae9a887dee87b778a1 ; affected bda250dbaf39f67f8910e183853e4e6a9e5ce899 < ed8bfb43de71213cfdbbe833b2c2817250e18b1a ; affected bda250dbaf39f67f8910e183853e4e6a9e5ce899 < e270d539b8a2e0cb8f617fee47a7b083c0088361 ; affected bda250dbaf39f67f8910e183853e4e6a9e5ce899 < 514a5d42d4188fc5f1499a8d654c717ebf981193 |
| Linux · Linux | affected 4.13 ; unaffected 0 < 4.13 ; unaffected 5.10.267 ≤ 5.10.* ; unaffected 5.15.217 ≤ 5.15.* ; unaffected 6.1.184 ≤ 6.1.* ; unaffected 6.6.153 ≤ 6.6.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |