CVE-2026-90418
Description
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix BUG in nilfs_copy_dirty_pages() on dirty state mismatch Syzbot reported a kernel BUG triggered within nilfs_copy_dirty_pages(), which copies dirty DAT file folios/pages to its shadow page cache. The BUG occurs when a retrieved dirty folio/page unexpectedly loses its 'dirty' status. This issue arises because, since the commit referenced below, the 'dirty' flag of a folio/page can be cleared asynchronously after the filesystem detects metadata corruption and transitions to read-only mode. Resolve the issue by returning an -EROFS error if the filesystem has transitioned to read-only mode. Also change the behavior to issue a kernel warning only once instead of triggering a kernel BUG when this unexpected 'dirty' state is detected while the filesystem is not in read-only mode.
How to fix
- Linux Linux6879c603a8d07af82da83768cc2342a11bd444e5, 5166a21b12f549774f2983fa86d2526ea9e66ace, 4e1f21e7540b25d83f86b50780836ed7d2afcc93, 3904fb0ee741ebbbc27ec8f50a9bb6cd31e8af05, f181155baf0c93a74ebe804c6cecbe970e78ee9e, 66f4ad3ce158902e5f98afea93189972ed8750c2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 8c26c4e2694a163d525976e804d81cd955bbb40c ≤ v < 6879c603a8d07af82da83768cc2342a11bd444e5, 8c26c4e2694a163d525976e804d81cd955bbb40c ≤ v < 5166a21b12f549774f2983fa86d2526ea9e66ace, 8c26c4e2694a163d525976e804d81cd955bbb40c ≤ v < 4e1f21e7540b25d83f86b50780836ed7d2afcc93, 8c26c4e2694a163d525976e804d81cd955bbb40c ≤ v < 3904fb0ee741ebbbc27ec8f50a9bb6cd31e8af05, 8c26c4e2694a163d525976e804d81cd955bbb40c ≤ v < f181155baf0c93a74ebe804c6cecbe970e78ee9e, 8c26c4e2694a163d525976e804d81cd955bbb40c ≤ v < 66f4ad3ce158902e5f98afea93189972ed8750c2, 3.10 | 6879c603a8d07af82da83768cc2342a11bd444e5, 5166a21b12f549774f2983fa86d2526ea9e66ace, 4e1f21e7540b25d83f86b50780836ed7d2afcc93, 3904fb0ee741ebbbc27ec8f50a9bb6cd31e8af05, f181155baf0c93a74ebe804c6cecbe970e78ee9e, 66f4ad3ce158902e5f98afea93189972ed8750c2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.