In the Linux kernel, the following vulnerability has been resolved:
hfsplus: remove mutex_lock check in hfsplus_free_extents
Syzbot reported an issue in hfsplus filesystem:
------------[ cut here ]------------ WARNING: CPU: 0 PID: 4400 at fs/hfsplus/extents.c:346 hfsplus_free_extents+0x700/0xad0 Call Trace: <TASK> hfsplus_file_truncate+0x768/0xbb0 fs/hfsplus/extents.c:606 hfsplus_write_begin+0xc2/0xd0 fs/hfsplus/inode.c:56 cont_expand_zero fs/buffer.c:2383 [inline] cont_write_begin+0x2cf/0x860 fs/buffer.c:2446 hfsplus_write_begin+0x86/0xd0 fs/hfsplus/inode.c:52 generic_cont_expand_simple+0x151/0x250 fs/buffer.c:2347 hfsplus_setattr+0x168/0x280 fs/hfsplus/inode.c:263 notify_change+0xe38/0x10f0 fs/attr.c:420 do_truncate+0x1fb/0x2e0 fs/open.c:65 do_sys_ftruncate+0x2eb/0x380 fs/open.c:193 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd
To avoid deadlock, Commit 31651c607151 ("hfsplus: avoid deadlock on file truncation") unlock extree before hfsplus_free_extents(), and add check wheather extree is locked in hfsplus_free_extents().
However, when operations such as hfsplus_file_release, hfsplus_setattr, hfsplus_unlink, and hfsplus_get_block are executed concurrently in different files, it is very likely to trigger the WARN_ON, which will lead syzbot and xfstest to consider it as an abnormality.
The comment above this warning also describes one of the easy triggering situations, which can easily trigger and cause xfstest&syzbot to report errors.
[task A] [task B] ->hfsplus_file_release ->hfsplus_file_truncate ->hfs_find_init ->mutex_lock ->mutex_unlock ->hfsplus_write_begin ->hfsplus_get_block ->hfsplus_file_extend ->hfsplus_ext_read_extent ->hfs_find_init ->mutex_lock ->hfsplus_free_extents WARN_ON(mutex_is_locked) !!!
Several threads could try to lock the shared extents tree. And warning can be triggered in one thread when another thread has locked the tree. This is the wrong behavior of the code and we need to remove the warning.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade python-perfUpgrade kernel-livepatch-5.10.242-239.961Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade bpftool | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 8, 2025 | Sep 8, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 14, 2025 | Aug 22, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Aug 22, 2025 |
| Suse | — | Upgrade gfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-default-develUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade dtb-mediatekUpgrade cluster-md-kmp-azureUpgrade dtb-qcomUpgrade dtb-alteraUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-64kbUpgrade kernel-devel-rtUpgrade cluster-md-kmp-rtUpgrade dtb-freescaleUpgrade gfs2-kmp-rtUpgrade kernel-azureUpgrade kernel-devel-azureUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade dtb-lgUpgrade ocfs2-kmp-defaultUpgrade dtb-amazonUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-azureUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade dtb-caviumUpgrade kernel-azure-develUpgrade dtb-exynosUpgrade kernel-rt-develUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-develUpgrade dlm-kmp-64kbUpgrade dtb-allwinnerUpgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade kernel-develUpgrade dtb-xilinxUpgrade kernel-default-extraUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade dtb-sprdUpgrade kernel-debugUpgrade kernel-syms-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-extraUpgrade dtb-marvellUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dtb-renesasUpgrade kernel-docsUpgrade kernel-default-baseUpgrade dtb-amlogicUpgrade dtb-amdUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade dtb-appleUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-rt-vdsoUpgrade kernel-debug-develUpgrade dtb-armUpgrade kernel-obs-buildUpgrade dlm-kmp-azureUpgrade dtb-broadcomUpgrade dtb-apmUpgrade dlm-kmp-defaultUpgrade kernel-macrosUpgrade kernel-docs-htmlUpgrade kernel-defaultUpgrade dtb-socionextUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-default-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-syms | Dec 5, 2025 | Sep 18, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-generic-lpaeUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-azure-6.14Upgrade linux-image-gcp-6.8Upgrade linux-image-6.14.0-36-genericUpgrade linux-image-aws-fips-6.8Upgrade linux-image-fipsUpgrade linux-image-gcp-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-realtime-6.14Upgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-aws-fipsUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-awsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-virtual-6.8Upgrade linux-image-oem-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.14.0-1016-oemUpgrade linux-image-ibm-5.15Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-realtimeUpgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-64kUpgrade linux-image-gcp-6.14Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-nvidia-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-aws-64kUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-virtualUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-xilinx-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-gkeUpgrade linux-image-generic-6.8Upgrade linux-image-genericUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1101-azureUpgrade linux-image-gcp-64kUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-realtime-5.15Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-azure-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-5.15.0-163-fipsUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-gke-64k-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-aws-64k-6.14Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-gkeopUpgrade linux-image-raspi-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04aUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-raspi-6.14Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1097-awsUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidiaUpgrade linux-image-kvm-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-xilinxUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-fips-5.15Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-6.14Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intel | Nov 25, 2025 | Nov 21, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Aug 22, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub