7.8

CVE-2026-64600

Medienbericht
Exploit

xfs: resample the data fork mapping after cycling ILOCK

In the Linux kernel, the following vulnerability has been resolved:

xfs: resample the data fork mapping after cycling ILOCK

xfs_reflink_fill_{cow_hole,delalloc} are both presented with an inode,
a data fork mapping, and a cow fork mapping.  Unfortunately, these two
helpers cycle the ILOCK to grab a transaction, which means that the
mappings are stale as soon as we reacquire the ILOCK.  Currently we
refresh the cow fork mapping by re-calling xfs_find_trim_cow_extent, but
we don't refresh the data fork mapping beforehand, which means that the
xfs_bmap_trim_cow in that function queries the refcount btree about the
wrong physical blocks and returns an inaccurate value in *shared.

If *shared is now false, the directio write proceeds with a stale data
fork mapping.  Fix this by querying the data fork mapping if the
sequence counter changes across the ILOCK cycle.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 4.11 < 5.15.212
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.178
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.145
Linux ≫ Linux Kernel Version >= 6.7 < 6.12.96
Linux ≫ Linux Kernel Version >= 6.13 < 6.18.39
Linux ≫ Linux Kernel Version >= 6.19 < 7.1.4
Linux ≫ Linux Kernel Version7.2 Updaterc1
Linux ≫ Linux Kernel Version7.2 Updaterc2
Linux ≫ Linux Kernel Version7.2 Updaterc3
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.47% 0.391
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
27.07.2026 16:36
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
23.07.2026 14:02
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
23.07.2026 12:02
https://git.kernel.org/stable/c/e705d81a7193dd19e69b8e2bad4696d78a4ea075
Patch
https://git.kernel.org/stable/c/206c09b04dc5469c7ff14d8aceff2d47c88078d9
Patch
https://git.kernel.org/stable/c/44f891bc088958399eec27f7604928694aa35581
Patch
https://git.kernel.org/stable/c/2f4acd0fcd862e22eab45690ec2c08c80b6ef2e7
Patch
http://www.openwall.com/lists/oss-security/2026/07/22/14
Exploit
Mailing List
http://www.openwall.com/lists/oss-security/2026/07/22/18
Mailing List
http://www.openwall.com/lists/oss-security/2026/07/22/19
Mailing List
https://cdn2.qualys.com/advisory/2026/07/22/RefluXFS.txt
Third Party Advisory
Exploit
https://git.kernel.org/stable/c/50f0012da1040f69a4e788cd9aed587c9a04983f
Patch
https://git.kernel.org/stable/c/b8c9aa832b52680ee40d6cab0efb081f9a69df05
Patch
https://git.kernel.org/stable/c/dc11be133efca5fe3a2fb02b016dee825cc12f18
Patch
http://www.openwall.com/lists/oss-security/2026/07/31/3
Mailing List
http://www.openwall.com/lists/oss-security/2026/08/03/4
Mailing List
http://www.openwall.com/lists/oss-security/2026/08/03/8
Mailing List