PT-2026-52016 · Linux · Linux Kernel

Published 2026-06-24 · Updated 2026-06-24 · CVE-2026-53122

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A deadlock can occur in the btrfs file system when the flushoncommit mount option is used. The issue arises during a reflink operation that copies an inline extent to an offset beyond the current i size of the destination node. This happens when one task clones an inline extent using copy inline to page(), while another task initiates a transaction commit and calls btrfs start delalloc flush() to flush delayed allocations. The flushing process attempts to invalidate a dirty folio via folio invalidate() and the btrfs invalidate folio() callback, which then blocks while waiting for an extent lock held by the first task. Simultaneously, the first task blocks while waiting for the transaction commit to complete, resulting in a deadlock.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-53122

Affected Products

Linux Kernel

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-53122 · Security Note
• https://twitter.com/infoflowcloud/status/2069847106718699638 · Twitter Post
• https://twitter.com/CVEnew/status/2069845529979400354 · Twitter Post
• https://git.kernel.org/stable/c/6f0f9c0a368aa1fe078109091322d3b0632d9380 · Note
• https://git.kernel.org/stable/c/73be4a08306bb84f4d5d16f62cb80e1543109ffa · Note
• https://git.kernel.org/stable/c/b48c980b6a7e409050bb3067165db31cc6205e3e · Note
• https://git.kernel.org/stable/c/9a24f0000876b8755cf21972b41632f4d6f3dafb · Note