{
  "cveId": "CVE-2026-80879",
  "url": "https://patchblox.com/security/cve/CVE-2026-80879",
  "summary": "CVE-2026-80879 is fixed in 11 products on 1 platform, first by DEBIAN-CVE-2026-80879, released September 5, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ocfs2: fix circular locking dependency in ocfs2_...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write  A circular locking dependency involves INODE_ALLOC_SYSTEM_INODE, EXTENT_ALLOC_SYSTEM_INODE, and ORPHAN_DIR_SYSTEM_INODE.  1. ocfs2_mknod() acquires INODE_ALLOC then EXTENT_ALLOC.  2. ocfs2_dio_end_io_write() acquires EXTENT_ALLOC for unwritten    extents, then ORPHAN_DIR via ocfs2_del_inode_from_orphan() while still    holding EXTENT_ALLOC.  3. ocfs2_wipe_inode() acquires ORPHAN_DIR then INODE_ALLOC via    ocfs2_remove_inode.  Break the cycle in ocfs2_dio_end_io_write() by freeing the allocation contexts (releasing EXTENT_ALLOC) before acquiring ORPHAN_DIR.  WARNING: possible circular locking dependency detected ------------------------------------------------------ is trying to acquire lock: ffff8881e78b33a0 (\u0026ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){\u002B.\u002B.}-{4:4}, at: ocfs2_evict_inode\u002B0x1539/0x43b0 fs/ocfs2/inode.c:1299  but task is already holding lock: ffff8881e78b4fa0 (\u0026ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]){\u002B.\u002B.}-{4:4}, at: ocfs2_evict_inode\u002B0xe97/0x43b0 fs/ocfs2/inode.c:1299  the existing dependency chain (in reverse order) is:  -\u003E #2 (\u0026ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]){\u002B.\u002B.}-{4:4}:        inode_lock include/linux/fs.h:1029 [inline]        ocfs2_del_inode_from_orphan\u002B0x12e/0x7a0 fs/ocfs2/namei.c:2728        ocfs2_dio_end_io\u002B0xf9c/0x1370 fs/ocfs2/aops.c:2418        dio_complete\u002B0x25b/0x790 fs/direct-io.c:281  -\u003E #1 (\u0026ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){\u002B.\u002B.}-{4:4}:        inode_lock include/linux/fs.h:1029 [inline]        ocfs2_reserve_suballoc_bits\u002B0x16d/0x4840 fs/ocfs2/suballoc.c:882        ocfs2_reserve_new_metadata_blocks\u002B0x415/0x9a0        fs/ocfs2/suballoc.c:1078        ocfs2_mknod\u002B0x10f3/0x2260 fs/ocfs2/namei.c:351  -\u003E #0 (\u0026ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){\u002B.\u002B.}-{4:4}:        __lock_acquire\u002B0x15a5/0x2cf0 kernel/locking/lockdep.c:5237        lock_acquire\u002B0x106/0x350 kernel/locking/lockdep.c:5868        down_write\u002B0x96/0x200 kernel/locking/rwsem.c:1625        inode_lock include/linux/fs.h:1029 [inline]        ocfs2_remove_inode fs/ocfs2/inode.c:733 [inline]        ocfs2_wipe_inode fs/ocfs2/inode.c:896 [inline]        ocfs2_delete_inode fs/ocfs2/inode.c:1157 [inline]        ocfs2_evict_inode\u002B0x1539/0x43b0 fs/ocfs2/inode.c:1299  Chain exists of:   \u0026ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE] --\u003E   \u0026ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE] --\u003E   \u0026ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]   Possible unsafe locking scenario:         CPU0                    CPU1        ----                    ----   lock(\u0026ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]);                                lock(\u0026ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]);                                lock(\u0026ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]);   lock(\u0026ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]);   *** DEADLOCK ***",
  "published": "2026-09-04T17:17:00Z",
  "severity": "",
  "epss": 0.00165,
  "epssPercentile": 0.05777,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.90.1",
      "fix": "SUSE-SU-2026:5091-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1",
      "released": "2026-11-07T00:43:02Z"
    },
    {
      "platform": "linux",
      "product": "kernel-azure",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.90.1",
      "fix": "SUSE-SU-2026:5091-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1",
      "released": "2026-11-07T00:43:02Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.90.1",
      "fix": "SUSE-SU-2026:5091-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1",
      "released": "2026-11-07T00:43:02Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.90.1.150700.17.51.1",
      "fix": "SUSE-SU-2026:5091-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1",
      "released": "2026-11-07T00:43:02Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.90.1",
      "fix": "SUSE-SU-2026:5091-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1",
      "released": "2026-11-07T00:43:02Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-SLE15-SP7_Update_24",
      "release": "sles 15.7",
      "fixedVersion": "1-150700.15.3.1",
      "fix": "SUSE-SU-2026:5091-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1",
      "released": "2026-11-07T00:43:02Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-build",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.90.1",
      "fix": "SUSE-SU-2026:5091-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1",
      "released": "2026-11-07T00:43:02Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.90.1",
      "fix": "SUSE-SU-2026:5091-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1",
      "released": "2026-11-07T00:43:02Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.90.1",
      "fix": "SUSE-SU-2026:5091-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1",
      "released": "2026-11-07T00:43:02Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.90.1",
      "fix": "SUSE-SU-2026:5091-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1",
      "released": "2026-11-07T00:43:02Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.180-1",
      "fix": "DEBIAN-CVE-2026-80879",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-80879",
      "released": "2026-09-05T01:57:10Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.12.100-1",
      "fix": "DEBIAN-CVE-2026-80879",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-80879",
      "released": "2026-09-05T01:57:10Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "7.1.5-1",
      "fix": "DEBIAN-CVE-2026-80879",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-80879",
      "released": "2026-09-05T01:57:10Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}