ext4: always drain queued discard work in ext4_mb_release() (Linux Linux)

CVE-2026-43065
MEDIUM 5.5

En bref

Source
NVD
EPSS
EPSS 0.12 % · centile 2 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
Linux
Statut NVD
Analyzed

Description

In the Linux kernel, the following vulnerability has been resolved: ext4: always drain queued discard work in ext4_mb_release() While reviewing recent ext4 patch[1], Sashiko raised the following concern[2]: > If the filesystem is initially mounted with the discard option, > deleting files will populate sbi->s_discard_list and queue > s_discard_work. If it is then remounted with nodiscard, the > EXT4_MOUNT_DISCARD flag is cleared, but the pending s_discard_work is > neither cancelled nor flushed. [1] https://lore.kernel.org/r/20260319094545.19291-1-qiang.zhang@linux.dev/ [2] https://sashiko.dev/#/patchset/20260319094545.19291-1-qiang.zhang%40linux.dev The concern was valid, but it had nothing to do with the patch[1]. One of the problems with Sashiko in its current (early) form is that it will detect pre-existing issues and report it as a problem with the patch that it is reviewing. In practice, it would be hard to hit deliberately (unless you are a malicious syzkaller fuzzer), since it would involve mounting the file system with -o discard, and then deleting a large number of files, remounting the file system with -o nodiscard, and then immediately unmounting the file system before the queued discard work has a change to drain on its own. Fix it because it's a real bug, and to avoid Sashiko from raising this concern when analyzing future patches to mballoc.c.

Références

Scores

VersionScoreVecteurÉvalué par
CVSS 3.1MEDIUM 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HNVD · nvd@nist.gov (Primary)

Références européennes

Avis du CERT-FR

Configurations affectées (CPE NVD)

Produits affectés

ProduitVersions
Linux · Linuxaffected 55cdd0af2bc5ffc92a2deb745627755aecd5db33 < e96c2354b170aaa53300c8e8fd59e41b133160f7 ; affected 55cdd0af2bc5ffc92a2deb745627755aecd5db33 < c360e9d0def4f4ae03254a67c683103908555b75 ; affected 55cdd0af2bc5ffc92a2deb745627755aecd5db33 < 1c82f863f090ab899085bdfade073313384b514b ; affected 55cdd0af2bc5ffc92a2deb745627755aecd5db33 < 9b4d9dda6a71ad3425c8109d27c4c6bfb9da97b8 ; affected 55cdd0af2bc5ffc92a2deb745627755aecd5db33 < 812b6a7cd3e7f3a3e8a24db85bc6313c26cb1098 ; affected 55cdd0af2bc5ffc92a2deb745627755aecd5db33 < b4737e26d4688b8aea88ad6ea4dbfeb6e78b0327
Linux · Linuxaffected 5.15 ; unaffected 0 < 5.15 ; unaffected 5.15.203 ≤ 5.15.* ; unaffected 6.1.168 ≤ 6.1.* ; unaffected 6.6.131 ≤ 6.6.* ; unaffected 6.12.80 ≤ 6.12.*

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD