CVE-2026-53049

The gfs2_logd() function calls log flush functions gfs2_ail1_start(), gfs2_ail1_wait(), and gfs2_ail1_empty() without first acquiring the sdp->sd_log_flush_lock lock. Meanwhile, these functions require mutual exclusion with respect to concurrent transactions. Lack of this synchronization can result in race conditions that violate the consistency of internal kernel data structures. The fix introduces a __gfs2_log_flush() version without its own locking and requires acquiring the sdp->sd_log_flush_lock before calling the aforementioned functions.

An attacker or local user able to perform appropriate operations on a GFS2 file system can cause data corruption, system instability, or system failure (kernel panic). A high CVSS score (9.8) indicates potential ability to breach system confidentiality, integrity, and availability.

Apply patches available from the vendor according to references: https://git.kernel.org/stable/c/3b28eb75afe520972bacc833850c2b30aa0824cd and related commits. It is recommended to update the Linux kernel to a version containing the fix.

Linux kernel with GFS2 file system support; specific versions indicated in vendor references (patches available at git.kernel.org)