In the Linux kernel, the following vulnerability has been resolved:
ext4: don't set up encryption key during jbd2 transaction
Commit a80f7fcf1867 ("ext4: fixup ext4_fc_track_* functions' signature") extended the scope of the transaction in ext4_unlink() too far, making it include the call to ext4_find_entry(). However, ext4_find_entry() can deadlock when called from within a transaction because it may need to set up the directory's encryption key.
Fix this by restoring the transaction to its original scope.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.90-54.138Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.165-143.735Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernelUpgrade python-perf | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Oct 3, 2025 | Oct 3, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel | Feb 3, 2026 | Feb 2, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 1, 2025 |
| Ubuntu | — | Upgrade linux-nvidia-tegra-5.15Upgrade linux-kvmUpgrade linux-oracle-5.15Upgrade linux-nvidiaUpgrade linux-lowlatency-hwe-5.15Upgrade linux-azure-5.15Upgrade linux-bluefieldUpgrade linux-gkeopUpgrade linux-oracleUpgrade linux-gkeUpgrade linux-riscv-5.15Upgrade linux-lowlatencyUpgrade linux-intel-iotgUpgrade linux-gcp-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-aws-5.15Upgrade linux-gcpUpgrade linux-realtimeUpgrade linux-intel-iotg-5.15Upgrade linux-ibmUpgrade linux-hwe-5.15Upgrade linux-raspiUpgrade linux-azureUpgrade linux-awsUpgrade linux | Oct 10, 2025 | Oct 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Oct 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub