CVE-2026-80532

CVE-2026-80532

published August 26, 2026

CVSS
—
EPSS
0%
Percentile
5.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

xfs: fix another iunlink infinite loop bug in online fsck

xrep_iunlink_resolve_bucket is supposed to reconstruct as much of the

incore prev and next unlinked list pointers based on what it finds on

disk and in memory before we move on to relinking the truly lost inodes

back into the unlinked list. However, it's still vulnerable to infinite

loops that come in via the next_unlinked pointers.

Fix this problem by remembering which inodes we've already seen and

checking new agino pointers against that. If a bit is already set,

either this is a loop or the inode has nonzero link count. We'll deal

with the second case in a subsequent patch.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00168 · 5.8th percentile
Published
2026-08-26T19:17Z
References (4)
EPSS history
Timeline
  • 28 AUG 06:54Z
    EPSS moved — → 0%
    epss
  • 26 AUG 14:37Z
    xfs: fix another iunlink infinite loop bug in online fsck
    cvelistv5