In the Linux kernel, the following vulnerability has been resolved:
nilfs2: do not write dirty data after degenerating to read-only
According to syzbot's report, mark_buffer_dirty() called from nilfs_segctor_do_construct() outputs a warning with some patterns after nilfs2 detects metadata corruption and degrades to read-only mode.
After such read-only degeneration, page cache data may be cleared through nilfs_clear_dirty_page() which may also clear the uptodate flag for their buffer heads. However, even after the degeneration, log writes are still performed by unmount processing etc., which causes mark_buffer_dirty() to be called for buffer heads without the "uptodate" flag and causes the warning.
Since any writes should not be done to a read-only file system in the first place, this fixes the warning in mark_buffer_dirty() by letting nilfs_segctor_do_construct() abort early if in read-only mode.
This also changes the retry check of nilfs_segctor_write_out() to avoid unnecessary log write retries if it detects -EROFS that nilfs_segctor_do_construct() returned.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-livepatch-4.14.318-240.529Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.184-174.730Upgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade perf-debuginfoUpgrade perf | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Sep 19, 2025 | Sep 19, 2025 |
| Ubuntu | — | Upgrade linux-ibm-5.15Upgrade linux-realtimeUpgrade linux-gkeopUpgrade linux-nvidia-tegra-5.15Upgrade linux-nvidia-tegraUpgrade linux-ibmUpgrade linux-intel-iotgUpgrade linux-intel-iot-realtimeUpgrade linux-gcpUpgrade linux-oracle-5.15Upgrade linux-oracle-5.4Upgrade linux-azure-5.15Upgrade linux-gcp-5.15Upgrade linux-fipsUpgrade linux-lowlatencyUpgrade linux-aws-5.4Upgrade linux-kvmUpgrade linux-riscv-5.15Upgrade linux-azure-fde-5.15Upgrade linux-raspiUpgrade linux-nvidiaUpgrade linux-aws-fipsUpgrade linux-aws-5.15Upgrade linux-azure-fipsUpgrade linux-xilinx-zynqmpUpgrade linux-gkeUpgrade linux-oracleUpgrade linux-hwe-5.15Upgrade linux-hwe-5.4Upgrade linux-raspi-5.4Upgrade linux-gcp-5.4Upgrade linux-nvidia-tegra-igxUpgrade linuxUpgrade linux-ibm-5.4Upgrade linux-azure-5.4Upgrade linux-intel-iotg-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-bluefieldUpgrade linux-gcp-fipsUpgrade linux-awsUpgrade linux-azureUpgrade linux-iot | Sep 26, 2025 | Sep 17, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Sep 17, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub