CVE-2026-46256
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
03/06/2026
Last modified:
22/07/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
NFS/localio: prevent direct reclaim recursion into NFS via nfs_writepages<br />
<br />
LOCALIO is an NFS loopback mount optimization that avoids using the<br />
network for READ, WRITE and COMMIT if the NFS client and server are<br />
determined to be on the same system. But because LOCALIO is still<br />
fundamentally "just NFS loopback mount" it is susceptible to recursion<br />
deadlock via direct reclaim, e.g.: NFS LOCALIO down to XFS and then<br />
back into NFS via nfs_writepages.<br />
<br />
Fix LOCALIO&#39;s potential for direct reclaim deadlock by ensuring that<br />
all its page cache allocations are done from GFP_NOFS context.<br />
<br />
Thanks to Ben Coddington for pointing out commit ad22c7a043c2 ("xfs:<br />
prevent stack overflows from page cache allocation").
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.12 (including) | 6.18.14 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.19 (including) | 6.19.4 (excluding) |
To consult the complete list of CPE names with products and versions, see this page



