nilfs2: fix infinite loop in nilfs_clean_segments()

Summary

CVECVE-2026-90420
StatePUBLISHED
AssignerLinux
Source PriorityCVE Program / NVD first with legacy fallback
Published2026-09-17 17:17:46 UTC
Updated2026-10-19 09:19:36 UTC
DescriptionIn the Linux kernel, the following vulnerability has been resolved: nilfs2: fix infinite loop in nilfs_clean_segments() syzbot reported a hung task in nilfs_transaction_begin(). This occurs because the cleaner ioctl falls into an infinite loop if nilfs_segctor_construct() repeatedly returns -EROFS (e.g. the device is remounted as read-only after an I/O error). Currently in nilfs_clean_segments(), if err is non-zero, it logs the error and sleeps but doesn't abort when it encounters a terminal error like -EROFS. This causes the thread to loop forever. Fix this by breaking out of the loop if nilfs_segctor_construct() returns -EROFS. This matches the behaviour in nilfs_segctor_write_out(), which also handles -EROFS.

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Linux Linux affected 9ff05123e3bfbb1d2b68ba1d9bf1f7d1dffc1453 e3e9367dae1a6392cbb14ab0b2ab5edbf39735c3 git Not specified
CNA Linux Linux affected 9ff05123e3bfbb1d2b68ba1d9bf1f7d1dffc1453 217b967ad7887a3e1ebc08f46f6484e081acd4b4 git Not specified
CNA Linux Linux affected 9ff05123e3bfbb1d2b68ba1d9bf1f7d1dffc1453 3bcdbdaac884a4baa59716cf9bd9470c75276e2d git Not specified
CNA Linux Linux affected 9ff05123e3bfbb1d2b68ba1d9bf1f7d1dffc1453 d7afca8e4efbf4c455b4663c29ae59fde2f1b671 git Not specified
CNA Linux Linux affected 9ff05123e3bfbb1d2b68ba1d9bf1f7d1dffc1453 c07e5ad6539e7e9350d5c65cbf8adb69d1711b15 git Not specified
CNA Linux Linux affected 9ff05123e3bfbb1d2b68ba1d9bf1f7d1dffc1453 1fc6df85b4954b6fda9c351843aaca3c06f66d8d git Not specified
CNA Linux Linux affected 9ff05123e3bfbb1d2b68ba1d9bf1f7d1dffc1453 8cea0bc78ac64cb88da49c07f80bf2cf9fb7aff8 git Not specified
CNA Linux Linux affected 9ff05123e3bfbb1d2b68ba1d9bf1f7d1dffc1453 ce5a5ad1a8330a2fcfdd9ec2ab341be739e89a18 git Not specified
CNA Linux Linux affected 2.6.30 Not specified
CNA Linux Linux unaffected 2.6.30 semver Not specified
CNA Linux Linux unaffected 5.10.270 5.10.* semver Not specified
CNA Linux Linux unaffected 5.15.221 5.15.* semver Not specified
CNA Linux Linux unaffected 6.1.188 6.1.* semver Not specified
CNA Linux Linux unaffected 6.6.157 6.6.* semver Not specified
CNA Linux Linux unaffected 6.12.110 6.12.* semver Not specified
CNA Linux Linux unaffected 6.18.52 6.18.* semver Not specified
CNA Linux Linux unaffected 7.2.6 7.2.* semver Not specified
CNA Linux Linux unaffected 7.3 * original_commit_for_fix Not specified

References

ReferenceSourceLinkTags
git.kernel.org/stable/c/3bcdbdaac884a4baa59716cf9bd9470c75276e2d 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/1fc6df85b4954b6fda9c351843aaca3c06f66d8d 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/e3e9367dae1a6392cbb14ab0b2ab5edbf39735c3 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/8cea0bc78ac64cb88da49c07f80bf2cf9fb7aff8 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/d7afca8e4efbf4c455b4663c29ae59fde2f1b671 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/c07e5ad6539e7e9350d5c65cbf8adb69d1711b15 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/ce5a5ad1a8330a2fcfdd9ec2ab341be739e89a18 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/217b967ad7887a3e1ebc08f46f6484e081acd4b4 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report