CVSS
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Атакува се
Време до експлоатация
Описание
Оригинално описание
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock cloning inline extent when using flushoncommit In commit b48c980b6a7e ("btrfs: fix deadlock between reflink and transaction commit when using flushoncommit") a deadlock was fixed between reflinks and transaction commits when the fs is mounted with the flushoncommit option. This happened when we had to copy an inline extent's data to the destination file. However the issue was fixed only for the case where the destination offset is 0, it missed the case when the offset is greater than zero. Fix this by ensuring we get i_size update whenever we copied an inline extent's data into the destination file. Syzbot reported this with the following trace: INFO: task kworker/u8:3:57 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:3 state:D stack:21600 pid:57 tgid:57 ppid:2 task_flags:0x4208160 flags:0x00080000 Workqueue: writeback wb_workfn (flush-btrfs-129) Call Trace: <TASK> context_switch kernel/sched/core.c:5402 [inline] __schedule+0x16f9/0x5500 kernel/sched/core.c:7204 __schedule_loop kernel/sched/core.c:7283 [inline] schedule+0x164/0x360 kernel/sched/core.c:7298 wait_extent_bit fs/btrfs/extent-io-tree.c:905 [inline] btrfs_lock_extent_bits+0x59c/0x700 fs/btrfs/extent-io-tree.c:2008 btrfs_lock_extent fs/btrfs/extent-io-tree.h:152 [inline] btrfs_invalidate_folio+0x440/0xc00 fs/btrfs/inode.c:7718 extent_writepage fs/btrfs/extent_io.c:1848 [inline] extent_write_cache_pages fs/btrfs/extent_io.c:2552 [inline] btrfs_writepages+0x12f3/0x2410 fs/btrfs/extent_io.c:2684 do_writepages+0x32e/0x550 mm/page-writeback.c:2571 __writeback_single_inode+0x133/0x10e0 fs/fs-writeback.c:1764 writeback_sb_inodes+0x97f/0x1980 fs/fs-writeback.c:2056 wb_writeback+0x445/0xb00 fs/fs-writeback.c:2241 wb_do
Засегнати продукти
- Linux Linux: 05a5a7621ce66c142e081ffc24dd6ade6e912061 преди 18694c1ca40c8d7a6a3e593ed3d764b0e18d33cd; 05a5a7621ce66c142e081ffc24dd6ade6e912061 преди 50d1a47fb3c4f3ee6c581e6bc4f1fb8d7051c5d1; 05a5a7621ce66c142e081ffc24dd6ade6e912061 преди 06283034cec0fa357cbd85784ef7d3f5b2ce0790; 05a5a7621ce66c142e081ffc24dd6ade6e912061 преди 2aa37c8ef1092c6f088e23a90bffefc672831c09; 05a5a7621ce66c142e081ffc24dd6ade6e912061 преди ea3452726ccb6bcaa732f43cc57bb928eca3dd59; 05a5a7621ce66c142e081ffc24dd6ade6e912061 преди 532085d00eb54c074bdeae648b194765239f4d11
- Linux Linux: 5.7; преди 5.7; 6.1.191 до 6.1.*; 6.6.160 до 6.6.*; 6.12.97 до 6.12.*; 6.18.40 до 6.18.*; 7.1.5 до 7.1.*; от 7.2 нататък
История
- 15 август 2026 Публикувано
Други уязвимости в Linux Linux
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-74318
- https://nvd.nist.gov/vuln/detail/CVE-2026-74318
- https://git.kernel.org/stable/c/18694c1ca40c8d7a6a3e593ed3d764b0e18d33cd
- https://git.kernel.org/stable/c/50d1a47fb3c4f3ee6c581e6bc4f1fb8d7051c5d1
- https://git.kernel.org/stable/c/06283034cec0fa357cbd85784ef7d3f5b2ce0790
- https://git.kernel.org/stable/c/2aa37c8ef1092c6f088e23a90bffefc672831c09
- https://git.kernel.org/stable/c/ea3452726ccb6bcaa732f43cc57bb928eca3dd59
- https://git.kernel.org/stable/c/532085d00eb54c074bdeae648b194765239f4d11