PT-2026-43762 · Linux+2 · Linux Kernel+2

CVE-2026-45895

·

Published

2026-01-16

·

Updated

2026-08-19

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A livelock issue exists between quotactl and freeze super in kernels with preemption disabled. When a filesystem is frozen, the quotactl block() function enters a retry loop using the sb start write() and sb end write() pair to wait for the filesystem to thaw. Simultaneously, freeze super() sets SB FREEZE WRITE and calls sb wait write(), which triggers percpu down write() and subsequently synchronize rcu(). Because the kernel is non-preemptible and the quotactl block() loop lacks scheduling points, the CPU never yields, preventing it from reaching an RCU quiescent state. This causes synchronize rcu() to wait indefinitely, while quotactl block() continues to spin, resulting in a hang of the freezer process and 100% CPU usage by the quota process.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Infinite Loop

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-12197
CVE-2026-45895
OESA-2026-2675
OESA-2026-2676
OPENSUSE-SU-2026:21555-1
SUSE-SU-2026:23066-1
SUSE-SU-2026:23068-1
SUSE-SU-2026:23221-1
SUSE-SU-2026:23231-1
SUSE-SU-2026:23237-1
USN-8492-1
USN-8492-2
USN-8492-3
USN-8492-4
USN-8492-5
USN-8497-1
USN-8498-1
USN-8499-1
USN-8606-1
USN-8607-1
USN-8609-1
USN-8619-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu