CVE-2026-31556

MEDIUM EPSS 2.3%
Published Apr 24, 20262mo ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Apr 24, 2026 2mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: xfs: scrub: unlock dquot before early return in quota scrub xchk_quota_item can return early after calling xchk_fblock_process_error. When that helper returns false, the function returned immediately without dropping dq->q_qlock, which can leave the dquot lock held and risk lock leaks or deadlocks in later quota operations. Fix this by unlocking dq->q_qlock before the early return.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
2.3% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Affected Products 11

VendorProductVersionRange
linuxlinux_kernel*≥6.8.1  –  <6.12.80
linuxlinux_kernel*≥6.13  –  <6.18.21
linuxlinux_kernel*≥6.19  –  <6.19.11
linuxlinux_kernel6.8any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any

References 4

  • git.kernel.org https://git.kernel.org/stable/c/268378b6ad20569af0d1957992de1c8b16c6e900
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/3b0c3414b308e6822cda90bf99f7eac94d4cca2b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d128fc0c5c2b19224927d4fd2a46c2fe6a1f606f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e822f535273af0e8968eab7acc0cea0b90dd25af
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/268378b6ad20569af0d1957992de1c8b16c6e900
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/3b0c3414b308e6822cda90bf99f7eac94d4cca2b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d128fc0c5c2b19224927d4fd2a46c2fe6a1f606f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e822f535273af0e8968eab7acc0cea0b90dd25af
    Patch