In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix possible data races in gfs2_show_options()
Some fields such as gt_logd_secs of the struct gfs2_tune are accessed without holding the lock gt_spin in gfs2_show_options():
val = sdp->sd_tune.gt_logd_secs; if (val != 30) seq_printf(s, ",commit=%d", val);
And thus can cause data races when gfs2_show_options() and other functions such as gfs2_reconfigure() are concurrently executed:
spin_lock(>->gt_spin); gt->gt_logd_secs = newargs->ar_commit;
To fix these possible data races, the lock sdp->sd_tune.gt_spin is acquired before accessing the fields of gfs2_tune and released after these accesses.
Further changes by Andreas:
- Don't hold the spin lock over the seq_printf operations.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade kernel-livepatch-4.14.326-245.539Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.10.192-182.736 | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Oct 9, 2025 | Oct 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade python3-perf | Mar 17, 2026 | Mar 17, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 7, 2025 |
| Ubuntu | — | Upgrade linux-azure-fde-5.15Upgrade linux-gcp-5.4Upgrade linux-nvidiaUpgrade linux-nvidia-tegra-igxUpgrade linux-intel-iot-realtimeUpgrade linux-aws-fipsUpgrade linux-gkeopUpgrade linux-nvidia-tegra-5.15Upgrade linux-gcp-fipsUpgrade linux-gcpUpgrade linux-ibm-5.15Upgrade linux-fipsUpgrade linux-nvidia-tegraUpgrade linux-azure-fipsUpgrade linux-awsUpgrade linux-hwe-5.4Upgrade linux-azure-5.15Upgrade linuxUpgrade linux-ibm-5.4Upgrade linux-riscv-5.15Upgrade linux-intel-iotgUpgrade linux-ibmUpgrade linux-intel-iotg-5.15Upgrade linux-lowlatencyUpgrade linux-iotUpgrade linux-aws-5.4Upgrade linux-azureUpgrade linux-aws-5.15Upgrade linux-hwe-5.15Upgrade linux-raspiUpgrade linux-gkeUpgrade linux-realtimeUpgrade linux-oracle-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-gcp-5.15Upgrade linux-oracle-5.4Upgrade linux-xilinx-zynqmpUpgrade linux-azure-5.4Upgrade linux-kvmUpgrade linux-oracleUpgrade linux-bluefieldUpgrade linux-raspi-5.4 | Oct 10, 2025 | Oct 7, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Oct 7, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub