In the Linux kernel, the following vulnerability has been resolved:
afs: Fix merge preference rule failure condition
syzbot reported a lock held when returning to userspace[1]. This is because if argc is less than 0 and the function returns directly, the held inode lock is not released.
Fix this by store the error in ret and jump to done to clean up instead of returning directly.
[dh: Modified Lizhi Xu's original patch to make it honour the error code from afs_split_string()]
[1] WARNING: lock held when returning to user space! 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 Not tainted ------------------------------------------------ syz-executor133/5823 is leaving the kernel with locks still held! 1 lock held by syz-executor133/5823: #0: ffff888071cffc00 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock include/linux/fs.h:818 [inline] #0: ffff888071cffc00 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: afs_proc_addr_prefs_write+0x2bb/0x14e0 fs/afs/addr_prefs.c:388
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade libperfUpgrade kernel-rt-modulesUpgrade kernel-develUpgrade python3-perfUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade perfUpgrade rtlaUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-develUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-develUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debugUpgrade kernel-rt-debugUpgrade kernel-64k-modules-extraUpgrade kernel-uki-virtUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-extraUpgrade kernel-modules-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernelUpgrade kernel-rt-64k-coreUpgrade kernel-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade kernel-tools-libsUpgrade kernel-64k-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-coreUpgrade kernel-rt-64k-develUpgrade kernel-rt-64k-debugUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-modulesUpgrade kernel-rtUpgrade kernel-zfcpdump-modulesUpgrade rvUpgrade kernel-64kUpgrade kernel-64k-debug-coreUpgrade kernel-cross-headersUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-64k-debugUpgrade kernel-rt-64kUpgrade kernel-64k-modulesUpgrade kernel-toolsUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-headers | Nov 20, 2025 | Nov 11, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Jan 31, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 9, 2025 | Jan 31, 2025 |
| Rocky_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modules-coreUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-coreUpgrade libperfUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-s390xUpgrade kernelUpgrade rvUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-uki-virt-addonsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libs-develUpgrade libperf-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-uki-virtUpgrade perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-debugUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade rtlaUpgrade python3-perf | Feb 5, 2026 | Nov 21, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-62-generic-64kUpgrade linux-image-6.8.0-1026-gkeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-1014-oracle-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1027-ibmUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1030-awsUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1031-gcp-64kUpgrade linux-image-6.8.0-1029-nvidia-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1029-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1029-nvidia-lowlatencyUpgrade linux-image-6.11.0-1020-oemUpgrade linux-image-6.11.0-1013-azureUpgrade linux-image-azureUpgrade linux-image-6.8.1-1023-realtimeUpgrade linux-image-6.8.0-1029-raspiUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1030-aws-64kUpgrade linux-image-6.11.0-1012-awsUpgrade linux-image-generic-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-62-lowlatencyUpgrade linux-image-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-kvmUpgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-6.8.0-1029-nvidiaUpgrade linux-image-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1029-oemUpgrade linux-image-6.11.0-1014-oracleUpgrade linux-image-gkeopUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.11.0-1008-realtimeUpgrade linux-image-6.11.0-1012-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1018-azure-nvidiaUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.11.0-1013-gcpUpgrade linux-image-6.8.0-1027-oracle-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-62-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-6.11.0-1011-raspiUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-64-genericUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.11.0-24-generic-64kUpgrade linux-image-6.8.0-1027-oracleUpgrade linux-image-6.11.0-24-genericUpgrade linux-image-6.8.0-1013-gkeopUpgrade linux-image-6.8.0-2024-raspi-realtimeUpgrade linux-image-oem-24.04aUpgrade linux-image-gkeUpgrade linux-image-6.8.0-62-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1031-gcpUpgrade linux-image-6.8.0-1030-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1012-lowlatency-64kUpgrade linux-image-aws-64kUpgrade linux-image-awsUpgrade linux-image-6.11.0-1013-azure-fdeUpgrade linux-image-6.11.0-1013-gcp-64kUpgrade linux-image-realtimeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1030-azure-fdeUpgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04 | Apr 24, 2025 | Jan 31, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub