{"id":17313,"date":"2026-09-05T02:30:59","date_gmt":"2026-09-04T18:30:59","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-80809"},"modified":"2026-09-05T02:30:59","modified_gmt":"2026-09-04T18:30:59","slug":"cve-2026-80809","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-80809","title":{"rendered":"CVE-2026-80809 &#8211; In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: fix missing me"},"content":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>ocfs2: fix missing metadata reservation for large xattrs<\/p>\n<p>[BUG]<br \/>\nlsetxattr() panics the kernel when setting a large xattr value on a<br \/>\nfragmented filesystem where the file already has an external xattr<br \/>\nblock.<\/p>\n<p>[CAUSE]<br \/>\nocfs2_calc_xattr_set_need() never reserves metadata blocks for a new<br \/>\nxattr value&#8217;s extent tree when the file already has an external xattr<br \/>\nblock. The not_found path leaves meta_add at zero, so meta_ac is NULL<br \/>\nwhen ocfs2_xattr_extend_allocation() runs.<\/p>\n<p>A new value root has room for a single extent record. On a fragmented<br \/>\nfilesystem, the allocator cannot satisfy the xattr value in one<br \/>\ncontiguous run, so each non-contiguous run requires its own extent<br \/>\nrecord. When the value root&#8217;s extent list is full and meta_ac is NULL,<br \/>\nocfs2_add_clusters_in_btree() returns RESTART_META, and<br \/>\nocfs2_xattr_extend_allocation() hits BUG_ON(why == RESTART_META).<\/p>\n<p>[FIX]<br \/>\nThe case where no xattr block exists yet already calls<br \/>\nocfs2_extend_meta_needed(&amp;def_xv.xv.xr_list) to reserve value tree<br \/>\nmetadata. Add the same reservation to the case where an xattr block<br \/>\nalready exists, making the two cases consistent.<\/p>\n<p>Replace the BUG_ON with a -ENOSPC return so that if RESTART_META is<br \/>\nreturned despite the reservation, the error propagates to userspace<br \/>\ninstead of panicking the kernel.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>ocfs2: fix missing metadata reservation for large xattrs<\/p>\n<p>[BUG]<br \/>\nlsetxattr() panics the kernel when setting a large xattr value on a<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-17313","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/17313","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=17313"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=17313"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=17313"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}