Riskcovery

CVE-2026-97521

gfs2: fix quota init duplicate scan

State
Published
Severity
Not scored
Published
Sep 24, 2026
Updated
Sep 28, 2026
Reserved
Sep 24, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

gfs2: fix quota init duplicate scan

gfs2_quota_init() checks for duplicate quota_change IDs while holding qd_lock and the quota hash bucket bitlock. That path used gfs2_qd_search_bucket(), which takes a lockref reference via lockref_get_not_dead().

On PREEMPT_RT this may sleep, which is not allowed under the bucket bitlock, triggering "sleeping function called from invalid context".

Use a no-ref bucket lookup in this path, then continue duplicate handling without taking a lockref there.

Refactor gfs2_qd_search_bucket() to build on top of the no-ref helper so lookup traversal stays in one place.

This patch fixes a bug reported by syzbot.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • de0d95c26c41c1776e4d23b1a8b3f2bcfd1dae5f to before 7fdcf16e5e14e11028f5bcaa6d25075eb5e876a0Affected
  • de0d95c26c41c1776e4d23b1a8b3f2bcfd1dae5f to before 812a766e2b0a8f4d094393fad13475c57f5f86dbAffected
  • de0d95c26c41c1776e4d23b1a8b3f2bcfd1dae5f to before b99a1f0f18ee50445907f55069e88bcfd8947383Affected
LinuxLinux
  • 6.11Affected
  • before 6.11Not affected
  • 6.12.111 through 6.12.*Not affected
  • 6.18.53 through 6.18.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.