# ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write

CVE record · `CVE-2026-80879`

- **Identifiers:** `CVE-2026-80879`
- **State:** Confirmed
- **Severity:** No CVSS score
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 4 Sept 2026
- **Updated:** 4 Sept 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 4 Sept 2026, 16:49 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `97c03c0e9f73a5049794b3c69ee60fb5e8b0ebd8 to before f0ae0a6ca87dc2d4a789f71cdedb808ba6c16990` (git)
  - affected: `1e99bb19994246514d63e656492904176f9d5edd to before 137e8b4823a9a11928428d4ec0a0cacb2f50a769` (git)
  - affected: `91e05ac2336d00d5b99fc774be4bd50039084796 to before 4273548e418bd935430d35e9d052870f323441f3` (git)
  - affected: `886f97fa59d0bbfa9859fb1a66dd9e014b522d89 to before 49b34bd3ad69611af03590a23abf2cda9ac1073d` (git)
  - affected: `ea5bb1d20da756e4f41a48dad42b2e7d6e73f71e to before ff187c502b39389b0d732cb7050a3db8e5ebfcd6` (git)
  - affected: `3c636a3edca9c3f180b3079f94fe7e115730d9c6 to before ae1f3460833d3e427420ab260278ec0e45d68c86` (git)
  - affected: `d647c5b2fbf81560818dacade360abc8c00a9665 to before f3dd1e534e9de64669415f8239e0094afecfed78` (git)
  - affected: `d647c5b2fbf81560818dacade360abc8c00a9665 to before ff6f26c58421614b02694ac9d219ac61d924bc68` (git)
  - affected: `069c3fb310e9336cf48cfdf8748a32c29fd0193d` (git)
  - affected: `5.10.258 to before 5.10.261` (semver)
  - affected: `5.15.209 to before 5.15.212` (semver)
  - affected: `6.1.175 to before 6.1.178` (semver)
  - and 4 more
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `7.1`
  - unaffected: `before 7.1` (semver)
  - unaffected: `5.10.261 to 5.10.*, inclusive` (semver)
  - unaffected: `5.15.212 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.178 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.145 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.97 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.40 to 6.18.*, inclusive` (semver)
  - unaffected: `7.1.5 to 7.1.*, inclusive` (semver)
  - unaffected: `7.2 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

No source has published a CVSS score for this record yet.

- **CISA KEV:** Not listed.
- **EPSS:** 0.0016, the 5th percentile, on 14 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 4 Sept 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-80879](https://www.cve.org/CVERecord?id=CVE-2026-80879)
- [NVD: CVE-2026-80879](https://nvd.nist.gov/vuln/detail/CVE-2026-80879)

### References from the CNA

- <https://git.kernel.org/stable/c/f0ae0a6ca87dc2d4a789f71cdedb808ba6c16990>
- <https://git.kernel.org/stable/c/137e8b4823a9a11928428d4ec0a0cacb2f50a769>
- <https://git.kernel.org/stable/c/4273548e418bd935430d35e9d052870f323441f3>
- <https://git.kernel.org/stable/c/49b34bd3ad69611af03590a23abf2cda9ac1073d>
- <https://git.kernel.org/stable/c/ff187c502b39389b0d732cb7050a3db8e5ebfcd6>
- <https://git.kernel.org/stable/c/ae1f3460833d3e427420ab260278ec0e45d68c86>
- <https://git.kernel.org/stable/c/f3dd1e534e9de64669415f8239e0094afecfed78>
- <https://git.kernel.org/stable/c/ff6f26c58421614b02694ac9d219ac61d924bc68>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-80879>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-80879/>. Everything for agents: <https://agentprime.io/llms.txt>.