CVE-2026-53050

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

quota: Fix race of dquot_scan_active() with quota deactivation

dquot_scan_active() can race with quota deactivation in

quota_release_workfn() like:

CPU0 (quota_release_workfn) CPU1 (dquot_scan_active)

============================== ==============================

spin_lock(&dq_list_lock);

list_replace_init(

&releasing_dquots, &rls_head);

/* dquot X on rls_head,

dq_count == 0,

DQ_ACTIVE_B still set */

spin_unlock(&dq_list_lock);

synchronize_srcu(&dquot_srcu);

spin_lock(&dq_list_lock);

list_for_each_entry(dquot,

&inuse_list, dq_inuse) {

/* finds dquot X */

dquot_active(X) -> true

atomic_inc(&X->dq_count);

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References