{"id":"CVE-2026-98444","kind":"vulnerability","aliases":["CVE-2026-98444"],"related":[],"title":"Linux kernel XFS: quota flush path leaves a dquot lock held","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: drop dquot flush lock when we can't find a buffer to flush\n\nLOLLM noticed that xfs_qm_flush_one fails to drop the dquot flush lock\nif it can't grab the buffer associated with the dquot.  Since there's no\nbuffer, nobody else is going to drop the dqflock, so we need to do it\nourselves.","summary":"In the Linux kernel's XFS filesystem, the quota flush routine xfs_qm_flush_one fails to release the dquot flush lock when it cannot find the buffer for a dquot. Because nothing else will release that lock, the lock stays held, which can stall later quota operations.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","linux-kernel","self-hosted","xfs"],"not_affected_if":["no-xfs","quotas-disabled"],"how_to_check":"- unknown","fix":"- Update the Linux kernel to a release that includes the upstream fix for xfs_qm_flush_one (the sources do not name the version).","status":"open","published_at":"2026-10-18T16:16:54+00:00","first_seen_at":"2026-10-23T21:57:15+00:00","triaged_at":"2026-10-25T05:27:29+00:00","updated_at":"2026-10-25T05:27:29+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-10-25T05:27:29Z","model":"claude-haiku-5-5","output":{"fix":"- Update the Linux kernel to a release that includes the upstream fix for xfs_qm_flush_one (the sources do not name the version).","reach":"unknown","title":"Linux kernel XFS: quota flush path leaves a dquot lock held","impact":"low","summary":"In the Linux kernel's XFS filesystem, the quota flush routine xfs_qm_flush_one fails to release the dquot flush lock when it cannot find the buffer for a dquot. Because nothing else will release that lock, the lock stays held, which can stall later quota operations.","category":"infrastructure","nicknames":[],"who_cares":["linux-kernel","xfs","self-hosted"],"confidence":0.4,"needs_auth":"unknown","worst_case":"unknown; a stuck lock and resulting stall or denial of service","analyst_note":"Sources give only the kernel commit description; check the NVD entry and the upstream kernel commit for affected version ranges, trigger conditions and impact.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":["no-xfs","quotas-disabled"],"who_is_affected":"Systems running a Linux kernel with XFS filesystems that use quotas are in scope. Systems without XFS or without quota enablement on XFS are unlikely to be affected, though the sources do not say this explicitly. The sources do not describe a trigger or a remote path.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000595,"input_tokens":3353,"output_tokens":519,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-98444':14A,17A 'associ':119C 'buffer':53B,95C,118C,127C 'cannot':50B 'cve':12A,15A 'dqflock':135C 'dquot':9A,45B,56B,86C,109C,122C 'drop':85C,107C,133C 'els':59B,129C 'fail':41B,105C 'filesystem':32B 'find':51B,93C 'flush':5A,35B,39B,46B,87C,97C,103C,110C 'follow':79C 'go':131C 'grab':116C 'held':11A,67B 'host':24B 'infrastructur':18B 'kernel':2A,21B,29B,77C 'later':71B 'leav':7A 'linux':1A,20B,28B,76C 'linux-kernel':19B 'lock':10A,47B,63B,65B,88C,111C 'lollm':98C 'need':138C 'nobodi':128C 'noth':58B 'notic':99C 'one':40B,104C 'oper':73B 'path':6A 'qm':38B,102C 'quota':4A,34B,72B 'releas':43B,61B 'resolv':83C 'routin':36B 'self':23B 'self-host':22B 'sinc':123C 'stall':70B 'stay':66B 'vulner':80C 'xfs':3A,25B,31B,37B,84C,101C","nicknames":[],"mitigations":[],"who_affected":"Systems running a Linux kernel with XFS filesystems that use quotas are in scope. Systems without XFS or without quota enablement on XFS are unlikely to be affected, though the sources do not say this explicitly. The sources do not describe a trigger or a remote path.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-18T16:16:54+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-98444","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98444","severity":null,"published_at":"2026-10-18T16:16:54+00:00","modified_at":"2026-10-19T10:18:53+00:00","first_seen_at":"2026-10-23T21:57:15+00:00","fetched_at":"2026-10-23T22:28:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}