CVE-2026-31556 Details
Description
In the Linux kernel, the following vulnerability has been resolved: xfs: scrub: unlock dquot before early return in quota scrub xchk_quota_item can return early after calling xchk_fblock_process_error. When that helper returns false, the function returned immediately without dropping dq->q_qlock, which can leave the dquot lock held and risk lock leaks or deadlocks in later quota operations. Fix this by unlocking dq->q_qlock before the early return.
A vulnerability in the Linux kernel's XFS file system quota scrubbing process can lead to lock management issues. Specifically, the function responsible for checking quota items can exit prematurely after encountering an error, without properly releasing a held lock. This oversight can cause lock leaks or deadlocks in subsequent quota operations. The vulnerability affects the Linux kernel stable group, particularly in version 6.8.
Users can upgrade to the patched version of the Linux kernel available in the Linux kernel stable tree. Instructions for downloading the updated kernel can be found in the Linux kernel official documentation.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/268378b6ad20569af0d1957992de1c8b16c6e900 | kernel.org | Patch |
| https://git.kernel.org/stable/c/3b0c3414b308e6822cda90bf99f7eac94d4cca2b | kernel.org | Patch |
| https://git.kernel.org/stable/c/d128fc0c5c2b19224927d4fd2a46c2fe6a1f606f | kernel.org | Patch |
| https://git.kernel.org/stable/c/e822f535273af0e8968eab7acc0cea0b90dd25af | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.8.1, < 6.12.80 >= 6.13, < 6.18.21 >= 6.19, < 6.19.11 6.8 - 7.0 rc1 7.0 rc2 7.0 rc3 7.0 rc4 7.0 rc5 7.0 rc6 7.0 rc7 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Apr 27, 2026 | Initial Analysis | [email protected] |
| Apr 24, 2026 | New CVE Received | kernel.org |