CVE-2025-38534

netfs: Fix copy-to-cache so that it performs collection with ceph+fscache

State
Published
Severity
Not scored
Published
Aug 16, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

netfs: Fix copy-to-cache so that it performs collection with ceph+fscache

The netfs copy-to-cache that is used by Ceph with local caching sets up a new request to write data just read to the cache. The request is started and then left to look after itself whilst the app continues. The request gets notified by the backing fs upon completion of the async DIO write, but then tries to wake up the app because NETFS_RREQ_OFFLOAD_COLLECTION isn't set - but the app isn't waiting there, and so the request just hangs.

Fix this by setting NETFS_RREQ_OFFLOAD_COLLECTION which causes the notification from the backing filesystem to put the collection onto a work queue instead.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e2d46f2ec332533816417b60933954173f602121 to before 1ebe58cef84eab22b41b4d5e72c2051ebf00af50Affected
  • e2d46f2ec332533816417b60933954173f602121 to before 4c238e30774e3022a505fa54311273add7570f13Affected
LinuxLinux
  • 6.14Affected
  • before 6.14Not affected
  • 6.15.8 through 6.15.*Not affected
  • 6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.