Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-31556

In the Linux kernel, the following vulnerability has been resolved: xfs: scrub: unlock dquot before early return in quota scrub xchk_quota_item can return early after calling xchk_fblock_process_error. When that helper returns false, the function returned immediately without dropping dq->q_qlock, which can leave the dquot lock held and risk lock leaks or deadlocks in later quota operations. Fix this by unlocking dq->q_qlock before the early return.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:d98a32443f819e0e876a5a0d1c38cd984a285b26a890a6eb81821b219159d7d3
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/xfs/scrub/quota.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"e822f535273af0e8968eab7acc0cea0b90dd25af","status":"affected","version":"7d1f0e167a067ed741dec08b7614d76893422b04","versionType":"git"},{"lessThan":"3b0c3414b308e6822cda90bf99f7eac94d4cca2b","status":"affected","version":"7d1f0e167a067ed741dec08b7614d76893422b04","versionType":"git"},{"lessThan":"d128fc0c5c2b19224927d4fd2a46c2fe6a1f606f","status":"affected","version":"7d1f0e167a067ed741dec08b7…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d40e330b183058a322d552183eab56c481841271698e38af0ab6078220ec32e5 · sha256:f256b7838415e964… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/xfs/scrub/quota.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.8"},{"lessThan":"6.8","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.80","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.21","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.11","versionType":"semver"},{"lessThanOrE…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d40e330b183058a322d552183eab56c481841271698e38af0ab6078220ec32e5 · sha256:f256b7838415e964… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/xfs/scrub/quota.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"e822f535273af0e8968eab7acc0cea0b90dd25af","status":"affected","version":"7d1f0e167a067ed741dec08b7614d76893422b04","versionType":"git"},{"lessThan":"3b0c3414b308e6822cda90bf99f7eac94d4cca2b","status":"affected","version":"7d1f0e167a067ed741dec08b7614d76893422b04","versionType":"git"},{"lessThan":"d128fc0c5c2b19224927d4fd2a46c2fe6a1f606f","status":"affected","version":"7d1f0e167a067ed741dec08b7…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d40e330b183058a322d552183eab56c481841271698e38af0ab6078220ec32e5 · sha256:f256b7838415e964… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["fs/xfs/scrub/quota.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.8"},{"lessThan":"6.8","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.80","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.21","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.11","versionType":"semver"},{"lessThanOrE…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d40e330b183058a322d552183eab56c481841271698e38af0ab6078220ec32e5 · sha256:f256b7838415e964… · /containers/cna/affected/1

Source references

4 source assertions
{"url":"https://git.kernel.org/stable/c/268378b6ad20569af0d1957992de1c8b16c6e900"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d40e330b183058a322d552183eab56c481841271698e38af0ab6078220ec32e5 · sha256:f256b7838415e964… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/3b0c3414b308e6822cda90bf99f7eac94d4cca2b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d40e330b183058a322d552183eab56c481841271698e38af0ab6078220ec32e5 · sha256:f256b7838415e964… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/d128fc0c5c2b19224927d4fd2a46c2fe6a1f606f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d40e330b183058a322d552183eab56c481841271698e38af0ab6078220ec32e5 · sha256:f256b7838415e964… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/e822f535273af0e8968eab7acc0cea0b90dd25af"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d40e330b183058a322d552183eab56c481841271698e38af0ab6078220ec32e5 · sha256:f256b7838415e964… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer