CVE Database›Document archive›CVE-2026-80532

CVE-2026-80532

kernel: xfs: fix another iunlink infinite loop bug in online fsck

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · August 26, 2026

Updated · October 30, 2026

Description

A flaw was found in the XFS filesystem's online file system check (fsck) utility within the Linux kernel. The xrep_iunlink_resolve_bucket function, responsible for reconstructing unlinked inode lists, is vulnerable to an infinite loop. This can occur due to malformed next_unlinked pointers, potentially leading to a Denial of Service (DoS) where the system becomes unresponsive during an online filesystem check.

Statement

This vulnerability is rated as having Low severity for Red Hat because triggering the denial-of-service condition requires local execution of online repair operations on a corrupt filesystem, and the affected online repair codebase is not present in Red Hat Enterprise Linux. Supported kernels do not incorporate the upstream changes that introduced this looping behavior in unlinked inode list resolution. As a result, standard enterprise deployments are not exposed to this issue.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')