CVE-2026-43262

gfs2: fiemap page fault fix

MEDIUM
5.5
CVSS Score
Published: May 6, 2026 at 11:28 AM UTC
Updated: June 17, 2026 at 10:49 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: gfs2: fiemap page fault fix In gfs2_fiemap(), we are calling iomap_fiemap() while holding the inode glock. This can lead to recursive glock taking if the fiemap buffer is memory mapped to the same inode and accessing it triggers a page fault. Fix by disabling page faults for iomap_fiemap() and faulting in the buffer by hand if necessary. Fixes xfstest generic/742.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

2.6.29 ≤ v < 5.15.2022.6.29 ≤ v < 6.1.1652.6.29 ≤ v < 6.12.752.6.29 ≤ v < 6.18.162.6.29 ≤ v < 6.19.62.6.29 ≤ v < 6.6.1282.6.29 ≤ v < 7.05.16 ≤ v < 6.1.1656.13 ≤ v < 6.18.166.19 ≤ v < 6.19.66.2 ≤ v < 6.6.1286.7 ≤ v < 6.12.752.6.29e9079cce201784632aed4b1a3121ee38c1ced0b6
Vendor states this is fixed in 2e121c53b581e40397ae08090a7af4ed10781fbc (fixed)
Vendor states this is fixed in 5d2c4f182ea8516de8682e2b60411c03df00e3ea (fixed)
Vendor states this is fixed in 5d5d9ec957bfa1eb2b05861c19f5d701dd006db7 (fixed)
Vendor states this is fixed in 9d15fee888f0e8938c9aeed71ec9c2cbba0c88ab (fixed)
Vendor states this is fixed in cead3bebf3e318578b8a86a5472015d713d2a8a8 (fixed)
Vendor states this is fixed in e411d74cc5ba290f85d0dd5e4d1df8f1d6d975d2 (fixed)
Vendor states this is fixed in e428670cfb2993d8c224effd076242ca6b0950de (fixed)
Vendor states this is fixed in 2.6.29 (unaffected)
Vendor states this is fixed in 5.15.202 (unaffected)
Vendor states this is fixed in 6.1.165 (unaffected)
Vendor states this is fixed in 6.12.75 (unaffected)
Vendor states this is fixed in 6.18.16 (unaffected)
Vendor states this is fixed in 6.19.6 (unaffected)
Vendor states this is fixed in 6.6.128 (unaffected)
Vendor states this is fixed in 7.0 (unaffected)

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-401

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card