{
  "affected": [
    {
      "ranges": [
        {
          "events": [
            {
              "introduced": "22c06bf1f99ec3ec16b1a81342becba4c59a1f16"
            },
            {
              "fixed": "2bdc80f4619411e5bd4a3ef23f51e14021ed457c"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "56e96b38d2f7cd95b3c30eb70decac7233915e0a"
            },
            {
              "fixed": "f9438cb8c8ec3adc84b2b450a3aab0123d074c3b"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "12a820a9923c11e8e898da9f82c8aded70cdcd16"
            },
            {
              "fixed": "ac8a2e0d287ebf35e5d7e51e260b4e146648ba4a"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "869b6ea1609f655a43251bf41757aa44e5350a8f"
            },
            {
              "fixed": "6678dde265708003c2b42551af4a2e3cb05decd5"
            },
            {
              "fixed": "61e25f664dc2a08299e07d84c85776abc2350f75"
            },
            {
              "fixed": "fdd424d7c35633ac577fd87d1b043d1b8a6cd350"
            },
            {
              "fixed": "82cbdb4c1ebb5ea7d7bd45c18d3483b5bd32ebc1"
            },
            {
              "fixed": "e93ab401da4b2e2c1b8ef2424de2f238d51c8b2d"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "last_affected": "bb7e3a019b52d829949d02b64ebab37838148fbf"
            },
            {
              "last_affected": "061a18239ced5eb086967a2b4451cb1cc5ce0702"
            },
            {
              "last_affected": "2a1ddddba6541143c8f73962f3021f1789114284"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "5.10.199"
            },
            {
              "fixed": "5.10.258"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "5.15.136"
            },
            {
              "fixed": "5.15.209"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "6.1.59"
            },
            {
              "fixed": "6.1.175"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "4.19.297"
            },
            {
              "fixed": "4.20"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "5.4.259"
            },
            {
              "fixed": "5.5"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "6.5.8"
            },
            {
              "fixed": "6.6"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Linux",
        "name": "Kernel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.10.258"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "5.11.0"
            },
            {
              "fixed": "5.15.209"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "5.16.0"
            },
            {
              "fixed": "6.1.175"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.2.0"
            },
            {
              "fixed": "6.6.141"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.6.0"
            },
            {
              "fixed": "6.12.91"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.7.0"
            },
            {
              "fixed": "6.18.33"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.13.0"
            },
            {
              "fixed": "7.0.10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53050.json"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nquota: Fix race of dquot_scan_active() with quota deactivation\n\ndquot_scan_active() can race with quota deactivation in\nquota_release_workfn() like:\n\n  CPU0 (quota_release_workfn)         CPU1 (dquot_scan_active)\n  ==============================      ==============================\n  spin_lock(\u0026dq_list_lock);\n  list_replace_init(\n    \u0026releasing_dquots, \u0026rls_head);\n    /* dquot X on rls_head,\n       dq_count == 0,\n       DQ_ACTIVE_B still set */\n  spin_unlock(\u0026dq_list_lock);\n  synchronize_srcu(\u0026dquot_srcu);\n                                      spin_lock(\u0026dq_list_lock);\n                                      list_for_each_entry(dquot,\n                                          \u0026inuse_list, dq_inuse) {\n                                        /* finds dquot X */\n                                        dquot_active(X) -\u003e true\n                                        atomic_inc(\u0026X-\u003edq_count);\n                                      }\n                                      spin_unlock(\u0026dq_list_lock);\n  spin_lock(\u0026dq_list_lock);\n  dquot = list_first_entry(\u0026rls_head);\n  WARN_ON_ONCE(atomic_read(\u0026dquot-\u003edq_count));\n\nThe problem is not only a cosmetic one as under memory pressure the\ncaller of dquot_scan_active() can end up working on freed dquot.\n\nFix the problem by making sure the dquot is removed from releasing list\nwhen we acquire a reference to it.",
  "id": "CVE-2026-53050",
  "modified": "2026-07-08T05:37:03.652602584Z",
  "published": "2026-06-24T16:29:56.043Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/2bdc80f4619411e5bd4a3ef23f51e14021ed457c"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/61e25f664dc2a08299e07d84c85776abc2350f75"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/6678dde265708003c2b42551af4a2e3cb05decd5"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/82cbdb4c1ebb5ea7d7bd45c18d3483b5bd32ebc1"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/ac8a2e0d287ebf35e5d7e51e260b4e146648ba4a"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/e93ab401da4b2e2c1b8ef2424de2f238d51c8b2d"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/f9438cb8c8ec3adc84b2b450a3aab0123d074c3b"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/fdd424d7c35633ac577fd87d1b043d1b8a6cd350"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53050.json"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53050"
    },
    {
      "type": "PACKAGE",
      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
    }
  ],
  "schema_version": "1.7.5",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "quota: Fix race of dquot_scan_active() with quota deactivation"
}