CVE-2026-80804 xfs: restore nofs context unconditionally in xfs_trans_roll
A race condition in the Linux kernel XFS filesystem can cause a deadlock, leading to denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-80804?
CVE-2026-80804 is a vulnerability in Linux, published on 4 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
xfs: restore nofs context unconditionally in xfs_trans_roll
When __xfs_trans_commit() fails in xfs_trans_roll(), the NOFS context is cleared but only restored in the success path. This leaves the error path without nofs protection, causing a circular lock dependency between xfs_nondir_ilock_class and fs_reclaim:
CPU0 CPU1 ---- ---- lock(&xfs_nondir_ilock_class); lock(fs_reclaim); lock(&xfs_nondir_ilock_class); lock(fs_reclaim);
Fix this by moving xfs_trans_set_context() before the error check so that nofs context is always restored on the new transaction.
Which versions are affected by CVE-2026-80804?
How do I fix CVE-2026-80804?
Apply the vendor's patch.
Is CVE-2026-80804 being exploited?
There is no known exploitation of CVE-2026-80804 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2026-80804, GHSA-m2xq-p36j-8h55, UBUNTU-CVE-2026-80804.