CVE-2026-97521
Description
In the Linux kernel, the following vulnerability has been resolved: gfs2: fix quota init duplicate scan gfs2_quota_init() checks for duplicate quota_change IDs while holding qd_lock and the quota hash bucket bitlock. That path used gfs2_qd_search_bucket(), which takes a lockref reference via lockref_get_not_dead(). On PREEMPT_RT this may sleep, which is not allowed under the bucket bitlock, triggering "sleeping function called from invalid context". Use a no-ref bucket lookup in this path, then continue duplicate handling without taking a lockref there. Refactor gfs2_qd_search_bucket() to build on top of the no-ref helper so lookup traversal stays in one place. This patch fixes a bug reported by syzbot.
How to fix
- Linux Linux7fdcf16e5e14e11028f5bcaa6d25075eb5e876a0, 812a766e2b0a8f4d094393fad13475c57f5f86db, b99a1f0f18ee50445907f55069e88bcfd8947383 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | de0d95c26c41c1776e4d23b1a8b3f2bcfd1dae5f ≤ v < 7fdcf16e5e14e11028f5bcaa6d25075eb5e876a0, de0d95c26c41c1776e4d23b1a8b3f2bcfd1dae5f ≤ v < 812a766e2b0a8f4d094393fad13475c57f5f86db, de0d95c26c41c1776e4d23b1a8b3f2bcfd1dae5f ≤ v < b99a1f0f18ee50445907f55069e88bcfd8947383, 6.11 | 7fdcf16e5e14e11028f5bcaa6d25075eb5e876a0, 812a766e2b0a8f4d094393fad13475c57f5f86db, b99a1f0f18ee50445907f55069e88bcfd8947383 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.