Description
In the Linux kernel, the following vulnerability has been resolved:

xfs: don't double-lock when deleting a self-referential directory

LOLLM notices that the dirtree scrubber can detect a directory that
refers to itself. In this case, it's not correct for the directory tree
repair code to try to iolock/ilock both sc->ip and dp, because they're
the same inode. Fix this by detecting that corner case and handling it
appropriately.
Published: 2026-08-26
Score: n/a
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A self‑referential directory within an XFS filesystem triggers a deadlock because the cleanup code attempts to acquire the same inode lock twice. This double locking can stall the kernel’s directory repair routine, leading to a kernel hang or crash and causing a service interruption for processes that rely on XFS or for the entire system. The flaw originates from a missing guard that would detect the self‑referential condition and avoid reacquiring the lock.

Affected Systems

Linux kernels with XFS support that have not applied the fix in commit 17bc347cbdfb125eddac0a815b1f6c1f6eb56676 (or the related commits referenced) are affected. The vulnerability is limited to systems that employ XFS filesystems on those kernel versions.

Risk and Exploitability

No EPSS score is available and the issue is not listed in the CISA KEV catalog. The description does not reveal any publicly disclosed exploits, and exploitation would require the ability to create or manipulate a self‑referential directory in XFS, implying local or privileged access. Given that the flaw can cause a kernel deadlock, the severity is high; however, the lack of exploitation data suggests the likelihood of being attacked is uncertain.

Generated by OpenCVE AI on August 26, 2026 at 16:34 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade the Linux kernel to a version that contains the self‑referential directory deletion fix, using the reference commits provided in the advisory.
  • If a kernel upgrade is not feasible, cherry‑pick the patch that implements the self‑referential directory check from the referenced commits into your kernel source tree, rebuild, and install the new kernel.
  • Reboot the system to load the updated kernel and ensure XFS filesystems resume normal operation.

Generated by OpenCVE AI on August 26, 2026 at 16:34 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 26 Aug 2026 17:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-399

Wed, 26 Aug 2026 14:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: xfs: don't double-lock when deleting a self-referential directory LOLLM notices that the dirtree scrubber can detect a directory that refers to itself. In this case, it's not correct for the directory tree repair code to try to iolock/ilock both sc->ip and dp, because they're the same inode. Fix this by detecting that corner case and handling it appropriately.
Title xfs: don't double-lock when deleting a self-referential directory
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-26T14:37:10.985Z

Reserved: 2026-08-26T14:34:25.764Z

Link: CVE-2026-80535

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-26T15:17:07.663

Modified: 2026-08-26T15:17:07.663

Link: CVE-2026-80535

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-26T19:00:06Z

Weaknesses