Linux Kernel CoW Vulnerability in XFS Filesystem Allowing Fragmentation

Vulnerability

A vulnerability in the Linux kernel's handling of Copy-on-Write (CoW) in the XFS filesystem can lead to fragmentation issues. This problem arises because XFS permits CoW on non-shared extents, which can be modified before their DAX (Direct Access) entries are cleared. As a result, the DAX entry remains dirty, causing a warning during operation. The vulnerability has been addressed by ensuring that the dirty mark is cleared before invalidating the DAX entry, allowing for proper management of the filesystem's state and preventing fragmentation.

Impact

Exploitation of this vulnerability could lead to improper management of DAX entries, causing fragmentation in the XFS filesystem.

Reproduction

The vulnerability can be reproduced by using a filesystem that allows CoW on non-shared extents. When such an extent is modified, its DAX entry becomes dirty. If the DAX entry is not properly cleared before the extent is invalidated, a warning is generated, indicating the presence of the vulnerability.

Remediation

Users can update to the latest version of the Linux kernel where this vulnerability has been fixed.

Added: Sep 16, 2025, 6:09 PM
Updated: Sep 16, 2025, 6:09 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.3
remediation
7.7
relevance
0.5
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.