Към съдържанието
Търсене

CVE-2026-90264: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: btrfs: always wait for ordered extents to avoid OE races [BUG] Syzbot reported a bug that there can be conflicting OEs for the same range: BTRFS critical (device loop4): panic in insert_ordered_extent:264: overlapping ordered extents, existing oe file_offset 16384 num_bytes 430080 flags 0x1089, new oe file_offset 16384 num_bytes 430080 flags 0x80 (errno=-17 Object alrea[ 179.162726][ T6897] BTRFS critical (device loop4): panic in insert_ordered_extent:264: overlapping ordered extents, existing oe file_offset 16384 num_bytes 430080 flags 0x1089, new oe file_offset 16384 num_bytes 430080 flags 0x80 (errno=-17 Object already exists) ------------[ cut here ]------------ kernel BUG at fs/btrfs/ordered-data.c:264! Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 RIP: 0010:btrfs_alloc_ordered_extent+0x943/0xad0 Call Trace: <TASK> cow_file_range+0x744/0x12a0 fallback_to_cow+0x5ea/0xa00 run_delalloc_nocow+0x110c/0x17a0 btrfs_run_delalloc_range+0xbe4/0x1c20 writepage_delalloc+0x104d/0x1ba0 btrfs_writepages+0x1667/0x28b0 do_writepages+0x338/0x560 filemap_fdatawrite_range+0x1f2/0x300 btrfs_fdatawrite_range+0x54/0xf0 btrfs_direct_write+0x6a0/0xc30 btrfs_do_write_iter+0x329/0x790 do_iter_readv_writev+0x624/0x8d0 vfs_writev+0x34c/0x990 __se_sys_pwritev2+0x17a/0x2a0 do_syscall_64+0x174/0x580 entry_SYSCALL_64_after_hwframe+0x77/0x7f </TASK> ---[ end trace 0000000000000000 ]--- [CAUSE] Since commit ff66fe666233 ("btrfs: fix incorrect buffered IO fallback for append direct writes"), if the direct IO finished short, we will revert the isize back to the original one, so that append writes can be respected during the buffered fallback. Normally we rely on lock_and_cleanup_extent_if_need() function during buffered writeback to wait for any existing ordered extents. But that ordered extent waiting only happen

    Засегнати продукти

    • Linux Linux: 10b1abc1d0c8ae25c2b9ac465515717c68ffff05 преди fa9f6e1958bb05b8a660d9cf2b6f51dee0077290; 097b159d43407b4ea0e5d14ae58a3bbfa5865a24 преди 043b6fd9706e4335851f317352d2717ad40e6d83; ccd5c23122b01de646c80485e2fadac82d1aab62 преди de8f5cb3cb611f96909797b4b017831f5141cbbe; c3a3d3986719026c85950bfa6f41a251fc46e16f преди 58ce50b1802a446d3b26df1b9c58be1ab8913d0e; ff66fe6662330226b3f486014c375538d91c44aa преди aaac9b352f7f53f5d2f7e58e612d67d2a2bf7094; ff66fe6662330226b3f486014c375538d91c44aa преди ec78575dde998c21be7e0cb2503b5620f34b6255; 4b5875cbb85dbf4d11385eb0a7a589c086d76d42; b8df7f486a4617d3096b8fa27148cfa54b1d6a8d; 6.1.178 преди 6.1.191; 6.6.145 преди 6.6.160; 6.12.97 преди 6.12.114; 6.18.40 преди 6.18.52; 5.15.212 преди 5.16; 7.1.4 преди 7.2
    • Linux Linux: 7.2; преди 7.2; 6.1.191 до 6.1.*; 6.6.160 до 6.6.*; 6.12.114 до 6.12.*; 6.18.52 до 6.18.*; 7.2.6 до 7.2.*; от 7.3 нататък

    История

    • 17 септември 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници