PT-2025-52892 · Xfs+5 · Xfs+5

Published

2025-12-24

·

Updated

2026-04-20

·

CVE-2025-68356

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A flaw exists in the Linux kernel’s gfs2 subsystem related to memory reclaim. The new inode() function returns a new inode with a gfp mask set to GFP HIGHUSER MOVABLE, which includes the GFP FS flag. This allows allocations within that address space to recurse into filesystem memory reclaim, potentially consuming significant stack memory and leading to deadlocks, particularly during filesystem transactions like those involving gfs2 unstuff dinode(). The issue arises because memory reclaim can trigger another transaction, resulting in a deadlock. The fix prevents memory reclaim from recursing into filesystem code by ensuring the gfp mask of inode address spaces does not include GFP FS. The fix is based on a similar solution implemented for XFS.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

AZL-73105
CVE-2025-68356
OESA-2026-1759
OESA-2026-1760
OESA-2026-1761
OPENSUSE-SU-2026:10039-1
OPENSUSE-SU-2026:10301-1
OPENSUSE-SU-2026:20287-1
SUSE-SU-2026:20555-1
SUSE-SU-2026:20599-1
SUSE-SU-2026:20615-1
USN-8094-1
USN-8094-2
USN-8094-3
USN-8094-4
USN-8094-5
USN-8152-1

Affected Products

Debian
Linuxmint
Linux Kernel
Ubuntu
Xfs
Gfs2