CVE-2026-93269
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
24/09/2026
Última modificación:
19/10/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
ext4: fix circular lock dependency in ext4_ext_migrate<br />
<br />
Move iput(tmp_inode) after ext4_writepages_up_write() to avoid a<br />
circular lock dependency between s_writepages_rwsem and sb_internal<br />
(freeze protection).<br />
<br />
The deadlock scenario:<br />
<br />
CPU0 (EXT4_IOC_MIGRATE) CPU1 (orphan cleanup during mount)<br />
---- ----<br />
ext4_ext_migrate()<br />
ext4_writepages_down_write()<br />
s_writepages_rwsem (write)<br />
ext4_evict_inode()<br />
sb_start_intwrite() [sb_internal]<br />
...<br />
ext4_writepages()<br />
s_writepages_rwsem (read) [BLOCKED]<br />
iput(tmp_inode)<br />
ext4_evict_inode()<br />
sb_start_intwrite() [BLOCKED]<br />
<br />
The tmp_inode is a temporary inode with nlink=0 created solely for<br />
building the extent tree. Its eviction does not require<br />
s_writepages_rwsem protection, so deferring iput() until after<br />
releasing the rwsem is safe.
Impacto
Referencias a soluciones, herramientas e información
- https://git.kernel.org/stable/c/32f7ab52875ec7f800ca67e7176e5743a84baddf
- https://git.kernel.org/stable/c/452950461241dfed8b1d32e94b227db38c99c5af
- https://git.kernel.org/stable/c/a897682793eba5de51ee6f3152760374afa629cf
- https://git.kernel.org/stable/c/ada23457d4748d6e9c36c6f871fc29a6f558c48c
- https://git.kernel.org/stable/c/e4223231b6860141813637a6413c2371ae4d6fa8


