Dave Wysochanski

The vulnerability is related to the NFS component of the Linux kernel. It is caused by incorrect locking in the `nfs netfs issue read()` function, which can lead to a deadlock when interrupts are not disabled while iterating through pages in the xarray to submit for NFS read. This issue can be reproduced with a specific test and may cause inconsistent lock state warnings on a lockdep-enabled kernel. The problem can occur when another page in the mapping is processed for writeback inside an interrupt, leading to a potential deadlock.

The issue is related to the netfs module in the Linux kernel, where the function netfs rreq unlock folios() can cause an oops when a network filesystem using netfs implements a clamp length() function. This can lead to a denial of service. The problem arises when the function folio start fscache() is called multiple times for the same folio, resulting in a kernel bug. The estimated number of potentially affected devices is not specified.

A slab-out-of-bounds issue has been identified in the `cachefiles set volume xattr` function of the Linux kernel. This issue occurs when the actual length of volume coherency data is not used when setting the xattr, resulting in a KASAN report. The bug is triggered by a write of size 4 at a specific address, causing the kernel to access memory outside the bounds of a slab allocation. The issue is related to the `cachefiles` module and the `fscache` workqueue.