UBUNTU-CVE-2026-97619: Low severity ubuntu/linux-hwe-edge vulnerability
In the Linux kernel, the following vulnerability has been resolved: iouring/rw: end write accounting from ->kicomplete Commit b000145e9907 moved both the fsnotify calls and the write accounting out of the kiocb completion handler and into the ioreqrwcomplete() taskwork. However, only the fsnotify part actually needed to move as it may sleep. Ending the write accounting is just a percpuupread() on the superblock writers sem. Deferring it is a problem, because it makes dropping SBFREEZEWRITE protection depend on the ring owner getting to running taskwork. But the task may be blocked in freezesuper(), causing it to never get to that: task io-wq worker -------------------------------------------------------------- iowrite() iokiocbstartwrite() (takes sbwriters, hidden from lockdep by sbwritersrelease) writeiter() -> -EIOCBQUEUED ioctl(FSIOCSHUTDOWN) bdevfreeze() freezesuper() percpudownwrite() <- waits for the reader above iowrite() kiocbstartwrite() percpudownread() <- queued behind the writer <bio completes> iocompleterw() queues ioreqrwcomplete() <- never runs, task is in D state End the write from iocompleterw() instead, and leave only the fsnotify calls in taskwork.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch b000145e9907