CVE-2025-38534

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
16/08/2025
Last modified:
18/08/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> netfs: Fix copy-to-cache so that it performs collection with ceph+fscache<br /> <br /> The netfs copy-to-cache that is used by Ceph with local caching sets up a<br /> new request to write data just read to the cache. The request is started<br /> and then left to look after itself whilst the app continues. The request<br /> gets notified by the backing fs upon completion of the async DIO write, but<br /> then tries to wake up the app because NETFS_RREQ_OFFLOAD_COLLECTION isn&amp;#39;t<br /> set - but the app isn&amp;#39;t waiting there, and so the request just hangs.<br /> <br /> Fix this by setting NETFS_RREQ_OFFLOAD_COLLECTION which causes the<br /> notification from the backing filesystem to put the collection onto a work<br /> queue instead.

Impact