In the Linux kernel, the following vulnerability has been resolved: netfs: clear PG_private_2 on...

In the Linux kernel, the following vulnerability has been resolved:

netfs: clear PG_private_2 on copy-to-cache append failure

netfs_pgpriv2_copy_to_cache() marks the folio with PG_private_2 before netfs_pgpriv2_copy_folio() appends it to the copy-to-cache rolling buffer.

If the append fails, the folio is not queued for cache writeback, so the PG_private_2 state and its reference must be released immediately.