From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 25146395AEA for ; Fri, 28 Aug 2026 06:55:23 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1787900124; cv=none; b=YZgUBbKTOQes3K66zzJzBJqt2ZQYZKNp5HkVTBe71kvz60a+ZmXgUtJXYJHnS8E93tVYf5m7kLO5UqWj1rdT6NAP1kvFtvrpCmDUyink3lhdBYIFdFmG2EL/I9w3VoV+R5/83iTLi9Nu/JFqCaACxzcclDxz9GFkuO28fiWYO3k= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1787900124; c=relaxed/simple; bh=G4CKXi5/ZQWYNlV8MG4Z7Xu6LDWkRu5o4/Ndq9rZmi0=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=W/06cYEGmCmPMcNLPT8rM1IU05ZEE4AvkZEelllrPNuoOVbw4iG9sJvMhUXz8Mw97fnWB41MeUXvp5d+1npzBw4eBSzQ5wNtxRav8TTtjaEv8KMUyLzF8wPUN8lkt+zzTihC1rVfvjBdDq0xspTDYjsz3LmH7XP1NAnG/z/UZo8= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=uFC5r3v2; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="uFC5r3v2" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 81FA51F000E9; Fri, 28 Aug 2026 06:55:22 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linuxfoundation.org; s=korg; t=1787900123; bh=rnyeHSTbhhkGMNKL8xc3lalpEOWjhzXX4uQVGAN6+1M=; h=From:To:Cc:Subject:Date:Reply-To; b=uFC5r3v29/ZBd/P/usxO7Sn9hggmC8LBgw0YbHtdhfLJMxLjqX08zCbjm/JbBT9pv 3Xsjt5u5C5BLISIdb2kmVA/fzZFDjLnEDPQOCbQ0vOjXSChluCnwkoLcFQMKn4P2So o8fiTcoIuBV1sfdK13fEOxKNVMZmpZJkfUKkRSog= From: Greg Kroah-Hartman To: linux-cve-announce@vger.kernel.org Cc: Greg Kroah-Hartman Subject: CVE-2026-80720: iomap: add a separate bio_set for iomap_split_ioend Date: Fri, 28 Aug 2026 08:53:43 +0200 Message-ID: <2026082810-CVE-2026-80720-fb94@gregkh> X-Mailer: git-send-email 2.55.0 Reply-To: , Precedence: bulk X-Mailing-List: linux-cve-announce@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-Developer-Signature: v=1; a=openpgp-sha256; l=2330; i=gregkh@linuxfoundation.org; h=from:subject:message-id; bh=xvEaFyZsS1XCUwVnsxDuCSKJZvzz8yN1y7bwIj5wEG0=; b=owGbwMvMwCRo6H6F97bub03G02pJDFkTDcKSAk8795lI8ZVuvvBXck/xM4XPO5eErVGZM/sEg xrzxKcnOmJZGASZGGTFFFm+bOM5ur/ikKKXoe1pmDmsTCBDGLg4BWAiPRYMC7qXb7n2TYY5tO9o iehR16txngmTqhnm8G+Ynt25bEl4zWs3J3/+Wa+Fs75/BgA= X-Developer-Key: i=gregkh@linuxfoundation.org; a=openpgp; fpr=F4B60CC5BF78C2214A313DCB3147D40DDB2DFB29 Content-Transfer-Encoding: 8bit From: Greg Kroah-Hartman Description =========== In the Linux kernel, the following vulnerability has been resolved: iomap: add a separate bio_set for iomap_split_ioend iomap_split_ioend can split bios that already come from iomap_ioend_bioset and thus deadlock when the bioset is exhausted. Add a separate bio_set to avoid this deadlock. Christian Brauner says: Mark iomap_ioend_split_bioset static as it is only used in ioend.c, fixing the sparse warning reported by the kernel test robot. The Linux kernel CVE team has assigned CVE-2026-80720 to this issue. Affected and fixed versions =========================== Issue introduced in 6.15 with commit 5fcbd555d48390a8c819ba7fdf55fbfcabe05c80 and fixed in 6.18.44 with commit cfc686a1174aa904dcad9b9a7c5e46b484d27e4e Issue introduced in 6.15 with commit 5fcbd555d48390a8c819ba7fdf55fbfcabe05c80 and fixed in 7.1.8 with commit 4a869be56e9f6ce7462abcf324ebdefc5de051be Issue introduced in 6.15 with commit 5fcbd555d48390a8c819ba7fdf55fbfcabe05c80 and fixed in 7.2 with commit c679ce3be6cb63763d68ab9b5d9d73ddc0a40762 Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2026-80720 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: fs/iomap/ioend.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/cfc686a1174aa904dcad9b9a7c5e46b484d27e4e https://git.kernel.org/stable/c/4a869be56e9f6ce7462abcf324ebdefc5de051be https://git.kernel.org/stable/c/c679ce3be6cb63763d68ab9b5d9d73ddc0a40762