In the Linux kernel, the following vulnerability has been resolved:
nilfs2: do not write dirty data after degenerating to read-only
According to syzbot's report, mark_buffer_dirty() called from nilfs_segctor_do_construct() outputs a warning with some patterns after nilfs2 detects metadata corruption and degrades to read-only mode.
After such read-only degeneration, page cache data may be cleared through nilfs_clear_dirty_page() which may also clear the uptodate flag for their buffer heads. However, even after the degeneration, log writes are still performed by unmount processing etc., which causes mark_buffer_dirty() to be called for buffer heads without the "uptodate" flag and causes the warning.
Since any writes should not be done to a read-only file system in the first place, this fixes the warning in mark_buffer_dirty() by letting nilfs_segctor_do_construct() abort early if in read-only mode.
This also changes the retry check of nilfs_segctor_write_out() to avoid unnecessary log write retries if it detects -EROFS that nilfs_segctor_do_construct() returned.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade python-perf-debuginfoUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.184-174.730Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.318-240.529Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade python-perf | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Sep 19, 2025 | Sep 19, 2025 |
| Ubuntu | — | Upgrade linux-raspiUpgrade linux-aws-5.15Upgrade linux-gcp-5.15Upgrade linux-kvmUpgrade linux-oracle-5.4Upgrade linux-lowlatencyUpgrade linux-intel-iot-realtimeUpgrade linux-xilinx-zynqmpUpgrade linux-aws-fipsUpgrade linux-gcpUpgrade linux-nvidia-tegra-5.15Upgrade linux-gkeUpgrade linux-oracleUpgrade linux-ibm-5.15Upgrade linux-aws-5.4Upgrade linux-azure-fipsUpgrade linux-ibmUpgrade linux-fipsUpgrade linux-gkeopUpgrade linux-azure-5.15Upgrade linux-realtimeUpgrade linux-nvidiaUpgrade linux-oracle-5.15Upgrade linux-riscv-5.15Upgrade linux-intel-iotgUpgrade linux-azure-fde-5.15Upgrade linux-nvidia-tegraUpgrade linux-hwe-5.15Upgrade linux-raspi-5.4Upgrade linux-bluefieldUpgrade linux-gcp-fipsUpgrade linux-ibm-5.4Upgrade linux-azure-5.4Upgrade linux-intel-iotg-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-hwe-5.4Upgrade linux-iotUpgrade linuxUpgrade linux-nvidia-tegra-igxUpgrade linux-awsUpgrade linux-azureUpgrade linux-gcp-5.4 | Sep 26, 2025 | Sep 17, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Sep 17, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub