netfs: Fix folio_queue ENOMEM in writeback by adding a mempool
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.12.114, 6.18.57, 7.1.8
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio_queue ENOMEM in writeback by adding a mempool Fix the handling of folio_queue allocation failure in writeback by adding a mempool and passing in gfp_t flags to the rolling buffer functions that allocate memory, using the mempool if gfp != GFP_KERNEL. This is then extended upwards and the gfp to be used for a request is stored in the netfs_io_request struct and is then used for both requests and subrequests, eliminating the sleeping loops there. The failure caused: folio != NULL WARNING: fs/netfs/write_issue.c:603 at netfs_writepages+0x883/0xa10 fs/netfs/write_issue.c:603, CPU#3: syz.0.17/5919
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From cd0277ed0c188dd40e7744e89299af7b78831ca4 · fixed in b343252d6f536203dd0660f676190dcbf6d2ecdc; From cd0277ed0c188dd40e7744e89299af7b78831ca4 · fixed in 15ed8a9b7c63e9171f5139a6aaa1ffb61809861f; From cd0277ed0c188dd40e7744e89299af7b78831ca4 · fixed in 3f6d7f8a5416d852648d15a05e895f1195ee8a85; From cd0277ed0c188dd40e7744e89299af7b78831ca4 · fixed in 1d78d56c43ef3768183e8370e7367b162700e049
- Linux Linux
6.12
- KernelLinux
From 6.12.0 · fixed in 6.12.114; From 6.13.0 · fixed in 6.18.57; From 6.19.0 · fixed in 7.1.8