{
  "affected": [
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:12",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.1.180-1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:13",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.12.100-1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:14",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.1.5-1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "In the Linux kernel, the following vulnerability has been resolved:  ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write  A circular locking dependency involves INODE_ALLOC_SYSTEM_INODE, EXTENT_ALLOC_SYSTEM_INODE, and ORPHAN_DIR_SYSTEM_INODE.  1. ocfs2_mknod() acquires INODE_ALLOC then EXTENT_ALLOC.  2. ocfs2_dio_end_io_write() acquires EXTENT_ALLOC for unwritten    extents, then ORPHAN_DIR via ocfs2_del_inode_from_orphan() while still    holding EXTENT_ALLOC.  3. ocfs2_wipe_inode() acquires ORPHAN_DIR then INODE_ALLOC via    ocfs2_remove_inode.  Break the cycle in ocfs2_dio_end_io_write() by freeing the allocation contexts (releasing EXTENT_ALLOC) before acquiring ORPHAN_DIR.  WARNING: possible circular locking dependency detected ------------------------------------------------------ is trying to acquire lock: ffff8881e78b33a0 (\u0026ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_evict_inode+0x1539/0x43b0 fs/ocfs2/inode.c:1299  but task is already holding lock: ffff8881e78b4fa0 (\u0026ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_evict_inode+0xe97/0x43b0 fs/ocfs2/inode.c:1299  the existing dependency chain (in reverse order) is:  -\u003e #2 (\u0026ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]){+.+.}-{4:4}:        inode_lock include/linux/fs.h:1029 [inline]        ocfs2_del_inode_from_orphan+0x12e/0x7a0 fs/ocfs2/namei.c:2728        ocfs2_dio_end_io+0xf9c/0x1370 fs/ocfs2/aops.c:2418        dio_complete+0x25b/0x790 fs/direct-io.c:281  -\u003e #1 (\u0026ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:        inode_lock include/linux/fs.h:1029 [inline]        ocfs2_reserve_suballoc_bits+0x16d/0x4840 fs/ocfs2/suballoc.c:882        ocfs2_reserve_new_metadata_blocks+0x415/0x9a0        fs/ocfs2/suballoc.c:1078        ocfs2_mknod+0x10f3/0x2260 fs/ocfs2/namei.c:351  -\u003e #0 (\u0026ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:        __lock_acquire+0x15a5/0x2cf0 kernel/locking/lockdep.c:5237        lock_acquire+0x106/0x350 kernel/locking/lockdep.c:5868        down_write+0x96/0x200 kernel/locking/rwsem.c:1625        inode_lock include/linux/fs.h:1029 [inline]        ocfs2_remove_inode fs/ocfs2/inode.c:733 [inline]        ocfs2_wipe_inode fs/ocfs2/inode.c:896 [inline]        ocfs2_delete_inode fs/ocfs2/inode.c:1157 [inline]        ocfs2_evict_inode+0x1539/0x43b0 fs/ocfs2/inode.c:1299  Chain exists of:   \u0026ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE] --\u003e   \u0026ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE] --\u003e   \u0026ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]   Possible unsafe locking scenario:         CPU0                    CPU1        ----                    ----   lock(\u0026ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]);                                lock(\u0026ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]);                                lock(\u0026ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]);   lock(\u0026ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]);   *** DEADLOCK ***",
  "id": "DEBIAN-CVE-2026-80879",
  "modified": "2026-09-14T16:47:29.896558874Z",
  "published": "2026-09-04T17:17:00.080Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://security-tracker.debian.org/tracker/CVE-2026-80879"
    }
  ],
  "upstream": [
    "CVE-2026-80879"
  ]
}