In the Linux kernel, the following vulnerability has been resolved:
afs: Fix merge preference rule failure condition
syzbot reported a lock held when returning to userspace[1]. This is because if argc is less than 0 and the function returns directly, the held inode lock is not released.
Fix this by store the error in ret and jump to done to clean up instead of returning directly.
[dh: Modified Lizhi Xu's original patch to make it honour the error code from afs_split_string()]
[1] WARNING: lock held when returning to user space! 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 Not tainted ------------------------------------------------ syz-executor133/5823 is leaving the kernel with locks still held! 1 lock held by syz-executor133/5823: #0: ffff888071cffc00 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock include/linux/fs.h:818 [inline] #0: ffff888071cffc00 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: afs_proc_addr_prefs_write+0x2bb/0x14e0 fs/afs/addr_prefs.c:388
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-devel-matchedUpgrade rtlaUpgrade kernel-uki-virtUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-64k-debug-coreUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-coreUpgrade kernel-64k-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-64k-debug-modules-coreUpgrade python3-perfUpgrade perfUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debugUpgrade libperfUpgrade kernel-toolsUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-64k-coreUpgrade kernel-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64kUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debugUpgrade kernel-rt-64kUpgrade kernel-rt-64k-develUpgrade kernel-64k-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-rt-64k-coreUpgrade rvUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-zfcpdump-develUpgrade kernel-abi-stablelistsUpgrade kernel-headersUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-modules | Nov 20, 2025 | Nov 11, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Jan 31, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 9, 2025 | Jan 31, 2025 |
| Rocky_linux | — | Upgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-modulesUpgrade rtlaUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade python3-perfUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-uki-virtUpgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade libperf-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-coreUpgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfo-common-s390xUpgrade libperfUpgrade rvUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-zfcpdump-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-devel-matchedUpgrade kernelUpgrade kernel-debug-modules-extraUpgrade kernel-modules-coreUpgrade kernel-tools | Feb 5, 2026 | Nov 21, 2025 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1027-oracleUpgrade linux-image-6.8.0-1030-azure-fdeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1018-azure-nvidiaUpgrade linux-image-oem-24.04Upgrade linux-image-virtualUpgrade linux-image-6.11.0-1012-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-2024-raspi-realtimeUpgrade linux-image-gkeUpgrade linux-image-6.11.0-24-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.11.0-24-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1027-oracle-64kUpgrade linux-image-6.8.0-1030-azureUpgrade linux-image-6.11.0-1013-gcp-64kUpgrade linux-image-realtimeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1013-gkeopUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-awsUpgrade linux-image-6.11.0-1013-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.11.0-1013-gcpUpgrade linux-image-6.11.0-1012-lowlatency-64kUpgrade linux-image-6.8.0-1031-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-64-genericUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.11.0-1011-raspiUpgrade linux-image-6.8.0-62-lowlatency-64kUpgrade linux-image-generic-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.11.0-1008-realtimeUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-62-genericUpgrade linux-image-virtual-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-1014-oracleUpgrade linux-image-gkeopUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.11.0-1013-azureUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.11.0-1014-oracle-64kUpgrade linux-image-6.8.0-1026-gkeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1027-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1029-oemUpgrade linux-image-6.8.0-62-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-62-generic-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1029-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1029-nvidia-64kUpgrade linux-image-azureUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.11.0-1012-awsUpgrade linux-image-genericUpgrade linux-image-6.11.0-1020-oemUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1030-aws-64kUpgrade linux-image-gcp-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1029-nvidiaUpgrade linux-image-6.8.0-1030-awsUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.1-1023-realtimeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1029-raspiUpgrade linux-image-6.8.0-1031-gcp-64kUpgrade linux-image-6.8.0-1029-nvidia-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-ibmUpgrade linux-image-oem-22.04dUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-6.8 | Apr 24, 2025 | Jan 31, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub