CVE-2025-38534
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
16/08/2025
Last modified:
18/08/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
netfs: Fix copy-to-cache so that it performs collection with ceph+fscache<br />
<br />
The netfs copy-to-cache that is used by Ceph with local caching sets up a<br />
new request to write data just read to the cache. The request is started<br />
and then left to look after itself whilst the app continues. The request<br />
gets notified by the backing fs upon completion of the async DIO write, but<br />
then tries to wake up the app because NETFS_RREQ_OFFLOAD_COLLECTION isn&#39;t<br />
set - but the app isn&#39;t waiting there, and so the request just hangs.<br />
<br />
Fix this by setting NETFS_RREQ_OFFLOAD_COLLECTION which causes the<br />
notification from the backing filesystem to put the collection onto a work<br />
queue instead.