UBUNTU-CVE-2026-80538: High severity ubuntu/linux-hwe-edge vulnerability
In the Linux kernel, the following vulnerability has been resolved: xfs: propagate errors from xfsrtginodeload xfsrtginodeensure() treats every xfsrtginodeload() error other than -ENOENT as success. This can leave the realtime group inode unset after an I/O, allocation, or corruption error. Growfs then continues as though the inode had been loaded. Only -ENOENT means that the inode needs to be created. Return all other errors to the growfs caller.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-hwe-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-42.42~24.04.1 - Upgrade
Upgrade
ubuntu/linux-riscv-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-42.42.1~24.04.1 - Upgrade
Upgrade
ubuntu/linuxto a version that resolves this vulnerability.Fixed in 7.0.0-42.42 - Upgrade
Upgrade
ubuntu/linux-awsto a version that resolves this vulnerability.Fixed in 7.0.0-1016.17 - Upgrade
Upgrade
ubuntu/linux-gcpto a version that resolves this vulnerability.Fixed in 7.0.0-1016.18 - Upgrade
Upgrade
ubuntu/linux-ibmto a version that resolves this vulnerability.Fixed in 7.0.0-1017.17 - Upgrade
Upgrade
ubuntu/linux-oem-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-1017.17 - Upgrade
Upgrade
ubuntu/linux-oracleto a version that resolves this vulnerability.Fixed in 7.0.0-1015.16 - Upgrade
Upgrade
ubuntu/linux-riscvto a version that resolves this vulnerability.Fixed in 7.0.0-42.42.1
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems using one of the listed Ubuntu Linux kernel packages are exposed when they use XFS with realtime groups and perform a growfs operation. The issue is local in scope and requires low privileges.
What does an attacker need to exploit it?
An attacker needs local access with low privileges. Exploitation involves causing an I/O, allocation, or corruption error while the realtime group inode is being loaded, followed by growfs continuing with that inode unset.
Are default installations affected?
The available information does not establish whether XFS realtime groups or growfs operations are enabled or used by default. Exposure depends on use of XFS realtime groups and a growfs operation.
What is the impact if the issue is triggered?
Growfs can proceed as though the realtime group inode was loaded even after an I/O, allocation, or corruption error left it unset. The provided severity vector indicates high integrity and availability impact, with no confidentiality impact.
How can I tell whether a system may be affected?
Check whether the system is running one of the listed Ubuntu kernel packages and uses XFS realtime groups. Systems that perform XFS growfs operations are the relevant operational scenario described by the vulnerability.