CVE-2026-80534

A flaw was found in the XFS filesystem component of the Linux kernel. The xfs_dq_get_next_id() function fails to release an inode lock (ilock) if an error occurs during extent reading. This ilock leak can leave the quota inode permanently locked, preventing further quota operations and leading to a denial of service for affected systems.

This flaw has a LOW impact. In the Linux kernel XFS filesystem, xfs_dq_get_next_id() can leak the quota inode's ILOCK on an error path: if xfs_iread_extents() fails, the function returns without releasing the inode lock, leaving the quota inode locked and causing subsequent XFS quota operations to hang. A local user able to reach the XFS quota control path (e.g. Q_XGETNEXTQUOTA) on a mounted XFS filesystem with quotas enabled could, when the extent-loading error condition occurs, cause a denial of service limited to XFS quota management. The issue is not network reachable and has no confidentiality, integrity, memory-corruption, or privilege-escalation impact.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

This issue only affects systems using XFS filesystems with quota support enabled and is limited to XFS quota management operations. No mitigation other than applying the kernel update meets Red Hat Product Security's criteria for ease of use, broad applicability, and stability.