In the Linux kernel, the following vulnerability has been resolved:
nilfs2: fix infinite loop in nilfs_mdt_get_block()
If the disk image that nilfs2 mounts is corrupted and a virtual block address obtained by block lookup for a metadata file is invalid, nilfs_bmap_lookup_at_level() may return the same internal return code as -ENOENT, meaning the block does not exist in the metadata file.
This duplication of return codes confuses nilfs_mdt_get_block(), causing it to read and create a metadata block indefinitely.
In particular, if this happens to the inode metadata file, ifile, semaphore i_rwsem can be left held, causing task hangs in lock_mount.
Fix this issue by making nilfs_bmap_lookup_at_level() treat virtual block address translation failures with -ENOENT as metadata corruption instead of returning the error code.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-develUpgrade python-perfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.318-240.529Upgrade kernel-livepatch-5.10.184-174.730 | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Dec 10, 2025 | Dec 10, 2025 |
| Ubuntu | — | Upgrade linux-oracleUpgrade linux-gkeopUpgrade linux-aws-fipsUpgrade linux-intel-iotgUpgrade linux-hwe-5.4Upgrade linux-kvmUpgrade linux-nvidia-tegra-igxUpgrade linux-ibmUpgrade linux-azureUpgrade linux-azure-5.4Upgrade linux-fipsUpgrade linux-ibm-5.15Upgrade linux-nvidiaUpgrade linux-aws-5.4Upgrade linux-azure-5.15Upgrade linux-oracle-5.15Upgrade linux-azure-fipsUpgrade linux-azure-fde-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-gcp-5.15Upgrade linux-riscv-5.15Upgrade linux-gcp-fipsUpgrade linux-raspiUpgrade linux-lowlatencyUpgrade linux-xilinx-zynqmpUpgrade linux-gcp-5.4Upgrade linux-gkeUpgrade linux-hwe-5.15Upgrade linux-realtimeUpgrade linuxUpgrade linux-aws-5.15Upgrade linux-iotUpgrade linux-nvidia-tegraUpgrade linux-raspi-5.4Upgrade linux-intel-iot-realtimeUpgrade linux-nvidia-tegra-5.15Upgrade linux-awsUpgrade linux-ibm-5.4Upgrade linux-gcpUpgrade linux-oracle-5.4Upgrade linux-bluefieldUpgrade linux-lowlatency-hwe-5.15 | Dec 11, 2025 | Dec 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub