nilfs2: fix infinite loop in nilfs_clean_segments()
Summary
| CVE | CVE-2026-90420 |
| State | PUBLISHED |
| Assigner | Linux |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-09-17 17:17:46 UTC |
| Updated | 2026-10-19 09:19:36 UTC |
| Description | In the Linux kernel, the following vulnerability has been resolved:
nilfs2: fix infinite loop in nilfs_clean_segments()
syzbot reported a hung task in nilfs_transaction_begin(). This occurs
because the cleaner ioctl falls into an infinite loop if
nilfs_segctor_construct() repeatedly returns -EROFS (e.g. the device
is remounted as read-only after an I/O error).
Currently in nilfs_clean_segments(), if err is non-zero, it logs the
error and sleeps but doesn't abort when it encounters a terminal error
like -EROFS. This causes the thread to loop forever.
Fix this by breaking out of the loop if nilfs_segctor_construct()
returns -EROFS. This matches the behaviour in
nilfs_segctor_write_out(), which also handles -EROFS. |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|
| CNA |
Linux |
Linux |
affected 9ff05123e3bfbb1d2b68ba1d9bf1f7d1dffc1453 e3e9367dae1a6392cbb14ab0b2ab5edbf39735c3 git |
Not specified |
| CNA |
Linux |
Linux |
affected 9ff05123e3bfbb1d2b68ba1d9bf1f7d1dffc1453 217b967ad7887a3e1ebc08f46f6484e081acd4b4 git |
Not specified |
| CNA |
Linux |
Linux |
affected 9ff05123e3bfbb1d2b68ba1d9bf1f7d1dffc1453 3bcdbdaac884a4baa59716cf9bd9470c75276e2d git |
Not specified |
| CNA |
Linux |
Linux |
affected 9ff05123e3bfbb1d2b68ba1d9bf1f7d1dffc1453 d7afca8e4efbf4c455b4663c29ae59fde2f1b671 git |
Not specified |
| CNA |
Linux |
Linux |
affected 9ff05123e3bfbb1d2b68ba1d9bf1f7d1dffc1453 c07e5ad6539e7e9350d5c65cbf8adb69d1711b15 git |
Not specified |
| CNA |
Linux |
Linux |
affected 9ff05123e3bfbb1d2b68ba1d9bf1f7d1dffc1453 1fc6df85b4954b6fda9c351843aaca3c06f66d8d git |
Not specified |
| CNA |
Linux |
Linux |
affected 9ff05123e3bfbb1d2b68ba1d9bf1f7d1dffc1453 8cea0bc78ac64cb88da49c07f80bf2cf9fb7aff8 git |
Not specified |
| CNA |
Linux |
Linux |
affected 9ff05123e3bfbb1d2b68ba1d9bf1f7d1dffc1453 ce5a5ad1a8330a2fcfdd9ec2ab341be739e89a18 git |
Not specified |
| CNA |
Linux |
Linux |
affected 2.6.30 |
Not specified |
| CNA |
Linux |
Linux |
unaffected 2.6.30 semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 5.10.270 5.10.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 5.15.221 5.15.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.1.188 6.1.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.6.157 6.6.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.12.110 6.12.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.18.52 6.18.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 7.2.6 7.2.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 7.3 * original_commit_for_fix |
Not specified |
References
| Reference | Source | Link | Tags |
|---|
| git.kernel.org/stable/c/3bcdbdaac884a4baa59716cf9bd9470c75276e2d |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/1fc6df85b4954b6fda9c351843aaca3c06f66d8d |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/e3e9367dae1a6392cbb14ab0b2ab5edbf39735c3 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/8cea0bc78ac64cb88da49c07f80bf2cf9fb7aff8 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/d7afca8e4efbf4c455b4663c29ae59fde2f1b671 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/c07e5ad6539e7e9350d5c65cbf8adb69d1711b15 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/ce5a5ad1a8330a2fcfdd9ec2ab341be739e89a18 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/217b967ad7887a3e1ebc08f46f6484e081acd4b4 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.