In the Linux kernel, the following vulnerability has been resolved:
netfs: Fix ceph copy to cache on write-begin
At the end of netfs_unlock_read_folio() in which folios are marked appropriately for copying to the cache (either with by being marked dirty and having their private data set or by having PG_private_2 set) and then unlocked, the folio_queue struct has the entry pointing to the folio cleared. This presents a problem for netfs_pgpriv2_write_to_the_cache(), which is used to write folios marked with PG_private_2 to the cache as it expects to be able to trawl the folio_queue list thereafter to find the relevant folios, leading to a hang.
Fix this by not clearing the folio_queue entry if we're going to do the deprecated copy-to-cache. The clearance will be done instead as the folios are written to the cache.
This can be reproduced by starting cachefiles, mounting a ceph filesystem with "-o fsc" and writing to it.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade kernel | Dec 3, 2025 | Jan 21, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jan 27, 2026 | Jan 21, 2025 |
| Rocky_linux | — | Upgrade kernel-toolsUpgrade kernel-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-modules-extra-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-uki-virtUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modulesUpgrade libperf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-modulesUpgrade rvUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-debug-debuginfoUpgrade kernel-debug-devel-matchedUpgrade python3-perf-debuginfoUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-debug-uki-virtUpgrade rtlaUpgrade kernel-rt-debug-develUpgrade libperfUpgrade kernel-zfcpdump-develUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernel-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-modules-coreUpgrade kernel-rt-modules-extra | Feb 5, 2026 | Nov 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub