In the Linux kernel, the following vulnerability has been resolved:
netfs: Only call folio_start_fscache() one time for each folio
If a network filesystem using netfs implements a clamp_length() function, it can set subrequest lengths smaller than a page size.
When we loop through the folios in netfs_rreq_unlock_folios() to set any folios to be written back, we need to make sure we only call folio_start_fscache() once for each folio.
Otherwise, this simple testcase:
mount -o fsc,rsize=1024,wsize=1024 127.0.0.1:/export /mnt/nfs dd if=/dev/zero of=/mnt/nfs/file.bin bs=4096 count=1 1+0 records in 1+0 records out 4096 bytes (4.1 kB, 4.0 KiB) copied, 0.0126359 s, 324 kB/s echo 3 > /proc/sys/vm/drop_caches cat /mnt/nfs/file.bin > /dev/null
will trigger an oops similar to the following:
page dumped because: VM_BUG_ON_FOLIO(folio_test_private_2(folio)) ------------[ cut here ]------------ kernel BUG at include/linux/netfs.h:44! ... CPU: 5 PID: 134 Comm: kworker/u16:5 Kdump: loaded Not tainted 6.4.0-rc5 ... RIP: 0010:netfs_rreq_unlock_folios+0x68e/0x730 [netfs] ... Call Trace: netfs_rreq_assess+0x497/0x660 [netfs] netfs_subreq_terminated+0x32b/0x610 [netfs] nfs_netfs_read_completion+0x14e/0x1a0 [nfs] nfs_read_completion+0x2f9/0x330 [nfs] rpc_free_task+0x72/0xa0 [sunrpc] rpc_async_release+0x46/0x70 [sunrpc] process_one_work+0x3bd/0x710 worker_thread+0x89/0x610 kthread+0x181/0x1c0 ret_from_fork+0x29/0x50
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.56-82.125Upgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perfUpgrade python3-perfUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade kernel-tools-devel | Feb 17, 2025 | Mar 2, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 2, 2024 |
| Suse | — | Upgrade kernel-rt_debugUpgrade kselftests-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-rt-optionalUpgrade kernel-default-vdsoUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-sourceUpgrade reiserfs-kmp-64kbUpgrade dtb-sprdUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade kernel-default-extraUpgrade dlm-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-default-livepatchUpgrade kernel-source-rtUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-syms-azureUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade kernel-debug-vdsoUpgrade kernel-azure-livepatch-develUpgrade dtb-qcomUpgrade dtb-exynosUpgrade dtb-amlogicUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade dlm-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-syms-rtUpgrade kernel-azure-vdsoUpgrade kernel-azure-optionalUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-macrosUpgrade dtb-marvellUpgrade kernel-kvmsmallUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-amazonUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-kvmsmall-develUpgrade dtb-renesasUpgrade dtb-socionextUpgrade dtb-xilinxUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-source-azureUpgrade reiserfs-kmp-rtUpgrade kernel-default-baseUpgrade kselftests-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-allwinnerUpgrade dtb-armUpgrade ocfs2-kmp-azureUpgrade kernel-debug-develUpgrade kernel-devel-rtUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-defaultUpgrade dtb-mediatekUpgrade dtb-appleUpgrade dtb-amdUpgrade kernel-debugUpgrade kernel-default-optionalUpgrade kernel-azure-extraUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade dtb-apmUpgrade kernel-develUpgrade kernel-64kb-optionalUpgrade kernel-rt-develUpgrade dtb-freescaleUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade dtb-lgUpgrade kernel-64kb-livepatch-develUpgrade kernel-docsUpgrade kernel-default-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-livepatchUpgrade dlm-kmp-defaultUpgrade dtb-altera | Apr 17, 2024 | Mar 2, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-6.5 | Nov 19, 2024 | Mar 2, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub