CVE-2026-80529: xfs: don't swallow dquot recovery verification errors
In the Linux kernel, the following vulnerability has been resolved:
xfs: don't swallow dquot recovery verification errors
xlogrecoverdquotcommitpass2() validates the recovered dquot with xfsdqblkverify() and, on failure, sets error = -EFSCORRUPTED and jumps to outrelease. But outrelease unconditionally returns 0, so the corruption error is discarded: the caller xlogrecoveritemspass2() sees success, log recovery proceeds as if the dquot were valid, and the corrupt quota buffer can be written back to disk.
Event History
Frequently Asked Questions
What condition is required for this issue to occur?
XFS log recovery must process a recovered disk quota (dquot) record that fails xfs_dqblk_verify(). The available information does not state how that invalid quota record is created.
What is the practical impact of the discarded verification error?
Recovery continues as though the invalid dquot were valid, and the corrupt quota buffer can subsequently be written back to disk. This can allow quota metadata corruption to persist or be propagated during log recovery.
How can administrators determine whether they may be affected?
Systems using XFS are relevant when they undergo log recovery involving recovered quota records. The provided information does not include a detection method, affected kernel versions, or log signatures.