CVE-2026-80532
kernel: xfs: fix another iunlink infinite loop bug in online fsck
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 26, 2026
Updated · October 30, 2026
Description
A flaw was found in the XFS filesystem's online file system check (fsck) utility within the Linux kernel. The xrep_iunlink_resolve_bucket function, responsible for reconstructing unlinked inode lists, is vulnerable to an infinite loop. This can occur due to malformed next_unlinked pointers, potentially leading to a Denial of Service (DoS) where the system becomes unresponsive during an online filesystem check.
Statement
This vulnerability is rated as having Low severity for Red Hat because triggering the denial-of-service condition requires local execution of online repair operations on a corrupt filesystem, and the affected online repair codebase is not present in Red Hat Enterprise Linux. Supported kernels do not incorporate the upstream changes that introduced this looping behavior in unlinked inode list resolution. As a result, standard enterprise deployments are not exposed to this issue.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')