In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix possible data races in gfs2_show_options()
Some fields such as gt_logd_secs of the struct gfs2_tune are accessed without holding the lock gt_spin in gfs2_show_options():
val = sdp->sd_tune.gt_logd_secs; if (val != 30) seq_printf(s, ",commit=%d", val);
And thus can cause data races when gfs2_show_options() and other functions such as gfs2_reconfigure() are concurrently executed:
spin_lock(>->gt_spin); gt->gt_logd_secs = newargs->ar_commit;
To fix these possible data races, the lock sdp->sd_tune.gt_spin is acquired before accessing the fields of gfs2_tune and released after these accesses.
Further changes by Andreas:
- Don't hold the spin lock over the seq_printf operations.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.326-245.539Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-livepatch-5.10.192-182.736Upgrade perfUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-debuginfo | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Oct 9, 2025 | Oct 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perf | Mar 17, 2026 | Mar 17, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 7, 2025 |
| Ubuntu | — | Upgrade linux-nvidia-tegra-5.15Upgrade linux-nvidiaUpgrade linux-intel-iot-realtimeUpgrade linux-gcp-fipsUpgrade linux-fipsUpgrade linux-gcp-5.4Upgrade linux-azure-fipsUpgrade linux-intel-iotgUpgrade linux-hwe-5.4Upgrade linux-azure-5.15Upgrade linux-gkeopUpgrade linux-nvidia-tegraUpgrade linux-aws-fipsUpgrade linux-riscv-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-ibm-5.15Upgrade linux-awsUpgrade linux-azure-fde-5.15Upgrade linux-ibm-5.4Upgrade linux-gcpUpgrade linux-ibmUpgrade linuxUpgrade linux-oracleUpgrade linux-aws-5.4Upgrade linux-realtimeUpgrade linux-iotUpgrade linux-gkeUpgrade linux-lowlatency-hwe-5.15Upgrade linux-bluefieldUpgrade linux-intel-iotg-5.15Upgrade linux-oracle-5.4Upgrade linux-azureUpgrade linux-lowlatencyUpgrade linux-raspi-5.4Upgrade linux-oracle-5.15Upgrade linux-hwe-5.15Upgrade linux-azure-5.4Upgrade linux-gcp-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-kvmUpgrade linux-aws-5.15Upgrade linux-raspi | Oct 10, 2025 | Oct 7, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Oct 7, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub