In the Linux kernel, the following vulnerability has been resolved:
xfs: restore nofs context unconditionally in xfstransroll
When __xfstranscommit() fails in xfstransroll(), the NOFS context is cleared but only restored in the success path. This leaves the error path without nofs protection, causing a circular lock dependency between xfsnondirilockclass and fsreclaim:
CPU0 CPU1
---- ----
lock(&xfsnondirilockclass); lock(fsreclaim); lock(&xfsnondirilockclass); lock(fsreclaim);
Fix this by moving xfstransset_context() before the error check so that nofs context is always restored on the new transaction.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80804.json",
"cna_assigner": "Linux"
}