Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2025-40196

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
12/11/2025
Última modificación:
12/11/2025

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> fs: quota: create dedicated workqueue for quota_release_work<br /> <br /> There is a kernel panic due to WARN_ONCE when panic_on_warn is set.<br /> <br /> This issue occurs when writeback is triggered due to sync call for an<br /> opened file(ie, writeback reason is WB_REASON_SYNC). When f2fs balance<br /> is needed at sync path, flush for quota_release_work is triggered.<br /> By default quota_release_work is queued to "events_unbound" queue which<br /> does not have WQ_MEM_RECLAIM flag. During f2fs balance "writeback"<br /> workqueue tries to flush quota_release_work causing kernel panic due to<br /> MEM_RECLAIM flag mismatch errors.<br /> <br /> This patch creates dedicated workqueue with WQ_MEM_RECLAIM flag<br /> for work quota_release_work.<br /> <br /> ------------[ cut here ]------------<br /> WARNING: CPU: 4 PID: 14867 at kernel/workqueue.c:3721 check_flush_dependency+0x13c/0x148<br /> Call trace:<br /> check_flush_dependency+0x13c/0x148<br /> __flush_work+0xd0/0x398<br /> flush_delayed_work+0x44/0x5c<br /> dquot_writeback_dquots+0x54/0x318<br /> f2fs_do_quota_sync+0xb8/0x1a8<br /> f2fs_write_checkpoint+0x3cc/0x99c<br /> f2fs_gc+0x190/0x750<br /> f2fs_balance_fs+0x110/0x168<br /> f2fs_write_single_data_page+0x474/0x7dc<br /> f2fs_write_data_pages+0x7d0/0xd0c<br /> do_writepages+0xe0/0x2f4<br /> __writeback_single_inode+0x44/0x4ac<br /> writeback_sb_inodes+0x30c/0x538<br /> wb_writeback+0xf4/0x440<br /> wb_workfn+0x128/0x5d4<br /> process_scheduled_works+0x1c4/0x45c<br /> worker_thread+0x32c/0x3e8<br /> kthread+0x11c/0x1b0<br /> ret_from_fork+0x10/0x20<br /> Kernel panic - not syncing: kernel: panic_on_warn set ...

Impacto