CVE-2026-80804

xfs: restore nofs context unconditionally in xfs_trans_roll

State
Published
Severity
Not scored
Published
Sep 4, 2026
Updated
Oct 19, 2026
Reserved
Aug 26, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

xfs: restore nofs context unconditionally in xfs_trans_roll

When __xfs_trans_commit() fails in xfs_trans_roll(), the NOFS context is cleared but only restored in the success path. This leaves the error path without nofs protection, causing a circular lock dependency between xfs_nondir_ilock_class and fs_reclaim:

CPU0 CPU1 ---- ---- lock(&xfs_nondir_ilock_class); lock(fs_reclaim); lock(&xfs_nondir_ilock_class); lock(fs_reclaim);

Fix this by moving xfs_trans_set_context() before the error check so that nofs context is always restored on the new transaction.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a1ca658d649a4d8972e2e21ac2625b633217e327 to before b09198cf90ccf296970b774beea1c1ddb260f94cAffected
  • a1ca658d649a4d8972e2e21ac2625b633217e327 to before 4d00a39c676274f4071b467e630565ac1e3ae0f2Affected
  • a1ca658d649a4d8972e2e21ac2625b633217e327 to before 0241ea5fb0fe86d2a673163b2f5815111aadc7f7Affected
LinuxLinux
  • 7.0Affected
  • before 7.0Not affected
  • 7.1.11 through 7.1.*Not affected
  • 7.2.1 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.