ocfs2: fix circular locking dependency in ocfs2_init_acl()
In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dependency in ocfs2_init_acl() A lockdep warning indicates a circular locking dependency between `&oi->ip_xattr_sem` and `&journal->j_trans_barrier`: WARNING: possible circular locking dependency detected is trying to acquire lock: (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x2fd/0x7e0 fs/ocfs2/acl.c:367 but task is already holding lock: (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x3ab/0x700 fs/ocfs2/journal.c:369 The deadlock involves two code paths: Path 1 (setxattr) where `ocfs2_xattr_set()` acquires `ip_xattr_sem` (write) and then starts a transaction, which acquires `j_trans_barrier` (read); and Path 2 (mkdir/mknod) where `ocfs2_mknod()` starts a transaction (`j_trans_barrier` read) and then calls `ocfs2_init_acl()`, which attempts to acquire `ip_xattr_sem` (read) on the parent directory to retrieve the default ACL. Because rw_semaphores are subject to writer priority, a pending writer on `j_trans_barrier` (e.g., the journal commit thread) can cause Path 1 to block, while Path 2 is blocked waiting for Path 1 to release `ip_xattr_sem`. The patch fixes the lock ordering by precomputing the ACL state before starting the OCFS2 transaction, while preserving POSIX ACL storage semantics and the existing inode/security initialization order. By reading the parent directory's default ACL and preparing the new inode's ACLs outside the transaction, `ip_xattr_s
CVE-2026-93252
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-93252
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "16c8d569f5704a84164f30ff01b29879f3438065",
"lessThan": "4936d4464d1ae10b5fbba64374085a0dcc060560",
"versionType": "git"
},
{
"status": "affected",
"version": "16c8d569f5704a84164f30ff01b29879f3438065",
"lessThan": "caf3056936fb8b5ce92e419cf8b246ce9c437343",
"versionType": "git"
},
{
"status": "affected",
"version": "16c8d569f5704a84164f30ff01b29879f3438065",
"lessThan": "5b7b3c50c39ad0dc27e7418981e01c4183273f89",
"versionType": "git"
},
{
"status": "affected",
"version": "16c8d569f5704a84164f30ff01b29879f3438065",
"lessThan": "8d88f52fbbbcc18adf4091a955511d0cf605bf11",
"versionType": "git"
},
{
"status": "affected",
"version": "16c8d569f5704a84164f30ff01b29879f3438065",
"lessThan": "8931403ee3dcfe8a24a5267efec9d9460ab7a1b5",
"versionType": "git"
},
{
"status": "affected",
"version": "16c8d569f5704a84164f30ff01b29879f3438065",
"lessThan": "f8747d81aa6d3efe3ee339a9d912ff3ca6e4d758",
"versionType": "git"
},
{
"status": "affected",
"version": "16c8d569f5704a84164f30ff01b29879f3438065",
"lessThan": "1222f7a3183b35c0c566899fdaead5c7c4043076",
"versionType": "git"
},
{
"status": "affected",
"version": "16c8d569f5704a84164f30ff01b29879f3438065",
"lessThan": "bd7c05fb4a4776dff5a87b19008d28458647d15d",
"versionType": "git"
},
{
"status": "affected",
"version": "15ac59a84750b3afc0a2b6f2636c4f7e6cbd6d5e",
"versionType": "git"
},
{
"status": "affected",
"version": "b35bb8a41795caa05e09c3aacf7d78f1f20bac04",
"versionType": "git"
},
{
"status": "affected",
"version": "1d5fdc1307eeb04b334c5dc23e11dbd6068d90eb",
"versionType": "git"
},
{
"status": "affected",
"version": "a66174eb4a149b7919d174d9a7ce6ad9909c5ee2",
"versionType": "git"
},
{
"status": "affected",
"version": "3.18.111",
"lessThan": "3.19",
"versionType": "semver"
},
{
"status": "affected",
"version": "4.4.134",
"lessThan": "4.5",
"versionType": "semver"
},
{
"status": "affected",
"version": "4.9.104",
"lessThan": "4.10",
"versionType": "semver"
},
{
"status": "affected",
"version": "4.14.37",
"lessThan": "4.15",
"versionType": "semver"
}
],
"programFiles": [
"fs/ocfs2/acl.c",
"fs/ocfs2/acl.h",
"fs/ocfs2/namei.c",
"fs/ocfs2/xattr.c",
"fs/ocfs2/xattr.h"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "4.16"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "4.16",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.10.270",
"versionType": "semver",
"lessThanOrEqual": "5.10.*"
},
{
"status": "unaffected",
"version": "5.15.221",
"versionType": "semver",
"lessThanOrEqual": "5.15.*"
},
{
"status": "unaffected",
"version": "6.1.188",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.6.157",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.12.110",
"versionType": "semver",
"lessThanOrEqual": "6.12.*"
},
{
"status": "unaffected",
"version": "6.18.52",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "7.2.6",
"versionType": "semver",
"lessThanOrEqual": "7.2.*"
},
{
"status": "unaffected",
"version": "7.3",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"fs/ocfs2/acl.c",
"fs/ocfs2/acl.h",
"fs/ocfs2/namei.c",
"fs/ocfs2/xattr.c",
"fs/ocfs2/xattr.h"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2026-93252
Source reference:
/cveMetadata/cveId
Publisher severity
No explicit severity was provided.
- Event
- #37945 · Revision 1
- Added to Heist Feed
- Publisher date