In the Linux kernel, the following vulnerability has been resolved:
fs: writeback: fix use-after-free in __mark_inode_dirty()
An use-after-free issue occurred when __mark_inode_dirty() get the bdi_writeback that was in the progress of switching.
CPU: 1 PID: 562 Comm: systemd-random- Not tainted 6.6.56-gb4403bd46a8e #1 ...... pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __mark_inode_dirty+0x124/0x418 lr : __mark_inode_dirty+0x118/0x418 sp : ffffffc08c9dbbc0 ........ Call trace: __mark_inode_dirty+0x124/0x418 generic_update_time+0x4c/0x60 file_modified+0xcc/0xd0 ext4_buffered_write_iter+0x58/0x124 ext4_file_write_iter+0x54/0x704 vfs_write+0x1c0/0x308 ksys_write+0x74/0x10c __arm64_sys_write+0x1c/0x28 invoke_syscall+0x48/0x114 el0_svc_common.constprop.0+0xc0/0xe0 do_el0_svc+0x1c/0x28 el0_svc+0x40/0xe4 el0t_64_sync_handler+0x120/0x12c el0t_64_sync+0x194/0x198
Root cause is:
systemd-random-seed kworker ---------------------------------------------------------------------- ___mark_inode_dirty inode_switch_wbs_work_fn
spin_lock(&inode->i_lock); inode_attach_wb locked_inode_to_wb_and_lock_list get inode->i_wb spin_unlock(&inode->i_lock); spin_lock(&wb->list_lock) spin_lock(&inode->i_lock) inode_io_list_move_locked spin_unlock(&wb->list_lock) spin_unlock(&inode->i_lock) spin_lock(&old_wb->list_lock) inode_do_switch_wbs spin_lock(&inode->i_lock) inode->i_wb = new_wb spin_unlock(&inode->i_lock) spin_unlock(&old_wb->list_lock) wb_put_many(old_wb, nr_switched) cgwb_release old wb released wb_wakeup_delayed() accesses wb, then trigger the use-after-free issue
Fix this race condition by holding inode spinlock until wb_wakeup_delayed() finished.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-modules-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-headersUpgrade libperfUpgrade rtlaUpgrade kernel-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-64k-debugUpgrade kernel-abi-stablelistsUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernelUpgrade kernel-rt-64k-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64kUpgrade kernel-64k-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modulesUpgrade kernel-64k-debugUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-uki-virtUpgrade kernel-rt-debug-develUpgrade kernel-devel-matchedUpgrade kernel-rt-64k-modulesUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade kernel-64k-develUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-coreUpgrade kernel-64k-modules-coreUpgrade kernel-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-rt-64k-coreUpgrade kernel-64k-debug-develUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-debug-coreUpgrade python3-perfUpgrade kernel-rt-64k-debug-modules-coreUpgrade perfUpgrade kernel-rt-modules-extraUpgrade rvUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rt-64k-develUpgrade kernel-rt-develUpgrade kernel-coreUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-64k-debug-develUpgrade kernel-docUpgrade kernel-tools-libsUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-rt-64kUpgrade kernel-develUpgrade kernel-64k-debug-modules | Jun 8, 2026 | May 19, 2026 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade perfUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-livepatch-5.15.193-133.214Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.247-246.989Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade bpftoolUpgrade kernel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-libbpf-debuginfoUpgrade kernel-livepatch-6.12.46-66.121Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.153-175.280Upgrade bpftool6.12Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel6.12-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade perf6.12-debuginfoUpgrade python3-perf6.12Upgrade kernel6.12Upgrade perf-debuginfoUpgrade kernel6.12-libbpf-develUpgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-modules-extraUpgrade bpftool6.12-debuginfoUpgrade kernel6.12-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-develUpgrade kernel-libbpf-staticUpgrade kernel6.12-toolsUpgrade kernel6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-livepatch-6.1.155-176.282Upgrade kernel6.12-libbpf-staticUpgrade perf6.12Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade kernelUpgrade kernel6.12-headersUpgrade bpftoolUpgrade kernel6.12-libbpfUpgrade python3-perfUpgrade kernel-develUpgrade kernel6.12-tools-debuginfoUpgrade kernel-toolsUpgrade python3-perf6.12-debuginfoUpgrade python3-perf-debuginfo | Sep 30, 2025 | Sep 19, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 25, 2025 | Sep 25, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perf | Jan 15, 2026 | Jan 13, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Dec 12, 2025 | Nov 11, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | Nov 12, 2025 | Nov 11, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perf | Dec 12, 2025 | Nov 11, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 8, 2025 | Sep 19, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | May 20, 2026 | Sep 19, 2025 |
| Suse | — | Upgrade kernel-docsUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kernel-default-baseUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-obs-buildUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-macros | Dec 5, 2025 | Nov 11, 2025 |
| Ubuntu | — | Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-106-fipsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-gke-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-generic-lpaeUpgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-azure-fipsUpgrade linux-image-aws-6.8Upgrade linux-image-xilinxUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-gcpUpgrade linux-image-raspi-realtimeUpgrade linux-image-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-intelUpgrade linux-image-gke-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-gke-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-realtimeUpgrade linux-image-raspi-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-gcp-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-1097-awsUpgrade linux-image-raspiUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-lowlatency-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-raspi-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-5.15Upgrade linux-image-fipsUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-aws-fips-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-realtime-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-virtualUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-6.8.0-1050-awsUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-ibmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04c | Dec 5, 2025 | Sep 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Sep 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub