In the Linux kernel, the following vulnerability has been resolved:
ocfs2: fix possible deadlock between unlink and dio_end_io_write
ocfs2_unlink takes orphan dir inode_lock first and then ip_alloc_sem, while in ocfs2_dio_end_io_write, it acquires these locks in reverse order. This creates an ABBA lock ordering violation on lock classes ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE] and ocfs2_file_ip_alloc_sem_key.
Lock Chain #0 (orphan dir inode_lock -> ip_alloc_sem): ocfs2_unlink ocfs2_prepare_orphan_dir ocfs2_lookup_lock_orphan_dir inode_lock(orphan_dir_inode) <- lock A __ocfs2_prepare_orphan_dir ocfs2_prepare_dir_for_insert ocfs2_extend_dir ocfs2_expand_inline_dir down_write(&oi->ip_alloc_sem) <- Lock B
Lock Chain #1 (ip_alloc_sem -> orphan dir inode_lock): ocfs2_dio_end_io_write down_write(&oi->ip_alloc_sem) <- Lock B ocfs2_del_inode_from_orphan() inode_lock(orphan_dir_inode) <- Lock A
Deadlock Scenario: CPU0 (unlink) CPU1 (dio_end_io_write) ------ ------ inode_lock(orphan_dir_inode) down_write(ip_alloc_sem) down_write(ip_alloc_sem) inode_lock(orphan_dir_inode)
Since ip_alloc_sem is to protect allocation changes, which is unrelated with operations in ocfs2_del_inode_from_orphan. So move ocfs2_del_inode_from_orphan out of ip_alloc_sem to fix the deadlock.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 5, 2026 | Jul 5, 2026 |
| Ubuntu | — | Upgrade linux-image-azure-fde-7.0Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-oracle-7.0Upgrade linux-image-6.8.0-136-fipsUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-aws-7.0Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-64k-7.0Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-7.0.0-1014-raspi-realtimeUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-aws-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-oem-24.04bUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-7.0.0-27-generic-64kUpgrade linux-image-7.0.0-28-genericUpgrade linux-image-7.0.0-1014-raspiUpgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-7.0.0-1008-awsUpgrade linux-image-gcp-5.15Upgrade linux-image-virtual-7.0Upgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-gcp-fipsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-oracle-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-oracleUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-nvidia-7.0Upgrade linux-image-ibm-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-7.0.0-1009-ibmUpgrade linux-image-realtime-7.0Upgrade linux-image-azure-lts-22.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-gkeopUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-7.0.0-27-genericUpgrade linux-image-aws-fipsUpgrade linux-image-gcp-7.0Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1061-awsUpgrade linux-image-azure-fde-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-aws-64k-5.15Upgrade linux-image-azure-fde-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-7.0.0-1008-aws-64kUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-5.15.0-1117-azureUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-ibmUpgrade linux-image-ibm-7.0Upgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-7.0.0-1013-nvidiaUpgrade linux-image-5.15.0-186-fipsUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-genericUpgrade linux-image-lowlatency-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-fips-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-7.0.0-27-realtimeUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-azure-fipsUpgrade linux-image-7.0.0-1013-nvidia-64kUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-virtual-5.15Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-7.0Upgrade linux-image-oem-24.04cUpgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-7.0.0-1007-gcpUpgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-azure-7.0Upgrade linux-image-oem-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-7.0.0-27-realtime-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-64k-7.0Upgrade linux-image-oem-20.04dUpgrade linux-image-ibm-classicUpgrade linux-image-oem-24.04dUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-oracle-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-realtimeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-gkeUpgrade linux-image-azure-cvmUpgrade linux-image-azure-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-7.0.0-1007-oracle-64kUpgrade linux-image-virtualUpgrade linux-image-realtime-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04bUpgrade linux-image-intel-iotgUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-oracle-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-awsUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-7.0.0-1007-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-realtime-64kUpgrade linux-image-generic-7.0Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-gke-6.8Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-laptop-23.10Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-azureUpgrade linux-image-kvm-5.15Upgrade linux-image-kvmUpgrade linux-image-intelUpgrade linux-image-ibm-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-5.15Upgrade linux-image-7.0.0-1007-gcp-64kUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-xilinxUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-tegra-igx | Jul 1, 2026 | Apr 24, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 10, 2026 | Apr 24, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub