Description
In the Linux kernel, the following vulnerability has been resolved:

iomap: add a separate bio_set for iomap_split_ioend

iomap_split_ioend can split bios that already come from
iomap_ioend_bioset and thus deadlock when the bioset is exhausted.

Add a separate bio_set to avoid this deadlock.

Christian Brauner <brauner@kernel.org> says:
Mark iomap_ioend_split_bioset static as it is only used in ioend.c,
fixing the sparse warning reported by the kernel test robot.
Published: 2026-08-28
Score: n/a
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A concurrency defect in the Linux kernel’s iomap subsystem can cause a deadlock when the iomap_split_ioend function processes more bios than the dedicated bio_set can hold. The suspension of I/O handling leads the kernel to become non‑responsive, effectively denying service to all running processes. The flaw is a classic deadlock scenario that can reduce system availability.

Affected Systems

The issue applies to all Linux kernel implementations that have not incorporated the patch referenced in the provided Git commit links. No specific version range is listed, so any kernel using the affected iomap code is potentially vulnerable.

Risk and Exploitability

The CVSS score is not supplied and the EPSS score is unavailable, which means publicly available damage potentials are unknown. However, from the description it is inferred that an attacker could trigger the deadlock by inducing a high volume of I/O operations that exhaust the bio_set. The vulnerability is not listed in the CISA KEV catalog, but the lack of exploitation data does not preclude the possibility of a denial‑of‑service attack once the kernel is vulnerable.

Generated by OpenCVE AI on August 28, 2026 at 10:20 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the latest kernel update that incorporates the iomap patch identified in the commit URLs; check the distribution’s security advisories for the correct release.
  • If a new kernel release is not yet available, limit or stagger large I/O workloads that may exhaust the bio_set to mitigate the risk of a deadlock.
  • Continuously monitor kernel logs (e.g., via dmesg) for I/O deadlock or bio_set exhaustion messages and apply standard system hardening practices to reduce service impact.

Generated by OpenCVE AI on August 28, 2026 at 10:20 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 28 Aug 2026 10:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-667

Fri, 28 Aug 2026 07:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: iomap: add a separate bio_set for iomap_split_ioend iomap_split_ioend can split bios that already come from iomap_ioend_bioset and thus deadlock when the bioset is exhausted. Add a separate bio_set to avoid this deadlock. Christian Brauner <brauner@kernel.org> says: Mark iomap_ioend_split_bioset static as it is only used in ioend.c, fixing the sparse warning reported by the kernel test robot.
Title iomap: add a separate bio_set for iomap_split_ioend
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-28T06:53:16.683Z

Reserved: 2026-08-26T14:34:25.788Z

Link: CVE-2026-80720

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-28T08:16:57.810

Modified: 2026-08-28T08:16:57.810

Link: CVE-2026-80720

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-28T10:30:17Z

Weaknesses