GHSA-6qrf-jjmp-5pjwunknown
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio_queue...
🔗 CVE IDs covered (1)
📋 Description
In the Linux kernel, the following vulnerability has been resolved:
netfs: Fix folio_queue ENOMEM in writeback by adding a mempool
Fix the handling of folio_queue allocation failure in writeback by adding a mempool and passing in gfp_t flags to the rolling buffer functions that allocate memory, using the mempool if gfp != GFP_KERNEL.
This is then extended upwards and the gfp to be used for a request is stored in the netfs_io_request struct and is then used for both requests and subrequests, eliminating the sleeping loops there.
The failure caused:
folio != NULL
WARNING: fs/netfs/write_issue.c:603 at netfs_writepages+0x883/0xa10 fs/netfs/write_issue.c:603, CPU#3: syz.0.17/5919
🔗 References (5)
- https://nvd.nist.gov/vuln/detail/CVE-2026-74542
- https://git.kernel.org/stable/c/1d78d56c43ef3768183e8370e7367b162700e049
- https://git.kernel.org/stable/c/3f6d7f8a5416d852648d15a05e895f1195ee8a85
- https://git.kernel.org/stable/c/15ed8a9b7c63e9171f5139a6aaa1ffb61809861f
- https://github.com/advisories/GHSA-6qrf-jjmp-5pjw