xfs: resample the data fork mapping after cycling ILOCK

In the Linux kernel, the following vulnerability has been resolved: x ...

Important: kernel security, bug fix, and enhancement update

ELSA-2026-38491: kernel security, bug fix, and enhancement update (IMPORTANT)

In the Linux kernel, the following vulnerability has been resolved: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete KASAN reproduces a slab-use-after-free in __xfrm_state_delete()'s hlist_del_rcu calls under syzkaller load on linux-6.12.y stable (reproduced on 6.12.47, also reachable via the same code path on torvalds/master and on the ipsec tree). Nine unique signatures cluster in the xfrm_state lifecycle, the load-bearing one being: BUG: KASAN: slab-use-after-free in __hlist_del include/linux/list.h:990 [inline] BUG: KASAN: slab-use-after-free in hlist_del_rcu include/linux/rculist.h:516 [inline] BUG: KASAN: slab-use-after-free in __xfrm_state_delete net/xfrm/xfrm_state.c Write of size 8 at addr ffff8881198bcb70 by task kworker/u8:9/435 Workqueue: netns cleanup_net Call Trace: __hlist_del / hlist_del_rcu __xfrm_state_delete xfrm_state_delete xfrm_state_flush xfrm_state_fini ops_exit_list cleanup_net The other observed signatur...

Уязвимость функции __xfrm_state_delete() модуля net/xfrm/xfrm_state.c реализации сетевых функций ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK xfs_reflink_fill_{cow_hole,delalloc} are both presented with an inode, a data fork mapping, and a cow fork mapping. Unfortunately, these two helpers cycle the ILOCK to grab a transaction, which means that the mappings are stale as soon as we reacquire the ILOCK. Currently we refresh the cow fork mapping by re-calling xfs_find_trim_cow_extent, but we don't refresh the data fork mapping beforehand, which means that the xfs_bmap_trim_cow in that function queries the refcount btree about the wrong physical blocks and returns an inaccurate value in *shared. If *shared is now false, the directio write proceeds with a stale data fork mapping. Fix this by querying the data fork mapping if the sequence counter changes across the ILOCK cycle.

ELBA-2026-39332: kernel bug fix and enhancement update (NA)

Уязвимость функций xfs_reflink_fill_cow_hole() и xfs_reflink_fill_delalloc() модуля fs/xfs/xfs_reflink.c файловой системы XFS ядра операционных систем Linux, позволяющая нарушителю оказать влияние на конфиденциальность, целостность и доступность защищаемой информации

Уязвимость kernel-lt

Уязвимость kernel-lt

ELBA-2026-500163: Unbreakable Enterprise kernel bug fix update (NA)

Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP7)

Уязвимость kernel-lt

Уязвимость kernel-lt

Important: kernel security, bug fix, and enhancement update

ELSA-2026-39494: kernel security, bug fix, and enhancement update (IMPORTANT)

Security update for the Linux Kernel

ELSA-2026-500238: Unbreakable Enterprise kernel security update (IMPORTANT)

Security update for the Linux Kernel (Live Patch 85 for SUSE Linux Enterprise 12 SP5)