PT-2026-128104
CVE-2026-99111
·
تاريخ النشر
2026-10-28
·
تاريخ التحديث
2026-10-28
الوصف من
الدرجة
N/A
غير متوفرلا تتوفر حاليًا تقييمات أو مقاييس للخطورة. سنحدّث المعلومات المقابلة في الصفحة فور توفرها.
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix data corruption with concurrent writes and O TRUNC
cifs do truncate() flushes dirty pages with filemap write and wait()
and truncates the file on the server, but in the old code both
operations ran without holding i rwsem or invalidate lock. A
concurrent buffered write via netfs perform write() -- which only
needs i rwsem shared -- could dirty new pages after the flush but
before the local truncation, and those pages would be silently
discarded by cifs setsize() -> truncate pagecache().
Fix by acquiring inode lock (exclusive i rwsem) and
filemap invalidate lock at the top of cifs do truncate(), so the
entire flush-truncate-resize sequence is atomic with respect to:
- buffered writes (blocked by exclusive i rwsem, since netfs start io write takes i rwsem shared),
- read page faults (blocked by exclusive invalidate lock, since filemap fault takes it shared),
- writeback collection (blocked by netfs wb begin/netfs wb end around the server truncate and local resize, since netfs writepages also acquires the wb lock).
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾