CVE-2026-80535xfs: don't double-lock when deleting a self-referential directory
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: xfs: don't double-lock when deleting a self-referential directory LOLLM notices that the dirtree scrubber can detect a directory that refers to itself. In this case, it's not correct for the directory tree repair code to try to iolock/ilock both sc->ip and dp, because they're the same inode. Fix this by detecting that corner case and handling it appropriately.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 26, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 3f31406aef493b3f19020909d29974e28253f91c before 17bc347cbdfb125eddac0a815b1f6c1f6eb56676; from 3f31406aef493b3f19020909d29974e28253f91c before ce2a7006ec5ed88db1b1669124ec85bc1714ccaa; from 3f31406aef493b3f19020909d29974e28253f91c before c575904471570e69bce40fa638365c6c0403e2ff; from 3f31406aef493b3f19020909d29974e28253f91c before 5fc643fb86599e29b38e7b2c2680b4b15bf8f772 | CNA record |
References
- https://git.kernel.org/stable/c/17bc347cbdfb125eddac0a815b1f6c1f6eb56676
- https://git.kernel.org/stable/c/ce2a7006ec5ed88db1b1669124ec85bc1714ccaa
- https://git.kernel.org/stable/c/c575904471570e69bce40fa638365c6c0403e2ff
- https://git.kernel.org/stable/c/5fc643fb86599e29b38e7b2c2680b4b15bf8f772
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.