Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-53049

gfs2: add some missing log locking

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.15.209, 6.1.175, 6.6.141, 6.12.91, 6.18.33, and 1 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: yes
  • Technical impact: total

Summary

In the Linux kernel, the following vulnerability has been resolved: gfs2: add some missing log locking Function gfs2_logd() calls the log flushing functions gfs2_ail1_start(), gfs2_ail1_wait(), and gfs2_ail1_empty() without holding sdp->sd_log_flush_lock, but these functions require exclusion against concurrent transactions. To fix that, add a non-locking __gfs2_log_flush() function. Then, in gfs2_logd(), take sdp->sd_log_flush_lock before calling the above mentioned log flushing functions and __gfs2_log_flush().

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: yes · Technical impact: total

  3. Record last updated

Affected versions

  • Linux Linux

    From 5e4c7632aae1cce137792647f4fb6f599d1da893 · fixed in 3b28eb75afe520972bacc833850c2b30aa0824cd; From 5e4c7632aae1cce137792647f4fb6f599d1da893 · fixed in ca95342cb1b39062a03c115830286f0a426053d5; From 5e4c7632aae1cce137792647f4fb6f599d1da893 · fixed in bf5fcd9c37c2546beaf7b401d31aefd89017dc3d; From 5e4c7632aae1cce137792647f4fb6f599d1da893 · fixed in f2f225cf505ac016132ded21690f3ba0a080a4e8; From 5e4c7632aae1cce137792647f4fb6f599d1da893 · fixed in 49d9be0722da3a4a893ba905720cba1921834ec3; From 5e4c7632aae1cce137792647f4fb6f599d1da893 · fixed in 98e8bf249c790d56de1abc4a5f8bd68035a00921; From 5e4c7632aae1cce137792647f4fb6f599d1da893 · fixed in fe2c8d051150b90b3ccb85f89e3b1d636cb88ec8

  • Linux Linux

    5.7

  • KernelLinux

    From 5.7.0 · fixed in 5.15.209; From 5.16.0 · fixed in 6.1.175; From 6.2.0 · fixed in 6.6.141; From 6.7.0 · fixed in 6.12.91; From 6.13.0 · fixed in 6.18.33; From 6.19.0 · fixed in 7.0.10

References 7

git.kernel.org