Linux Kernel Nilfs2 Filesystem Read-Only Mode Vulnerability

Vulnerability

A vulnerability in the Linux kernel's nilfs2 filesystem has been addressed. The issue arose when nilfs2 detected metadata corruption, leading to a degradation to read-only mode. Despite this, log writes were still performed, causing a warning to be issued. The vulnerability occurred because the system attempted to write dirty data to a read-only filesystem, which is not permissible. The issue has been resolved by modifying the behavior of certain functions to respect the read-only status and prevent unnecessary write retries during unmount processing.

Impact

The vulnerability could cause the system to issue warnings about buffer heads that are not up-to-date, due to improper handling of dirty data after the filesystem had degraded to read-only.

Reproduction

The vulnerability can be reproduced by using the nilfs2 filesystem and inducing metadata corruption, which triggers a transition to read-only mode. During this read-only phase, normal unmount processing can still attempt to write log data, leading to the warning about buffer heads being out of sync.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed.

Added: Sep 17, 2025, 4:16 PM
Updated: Sep 17, 2025, 4:16 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.0
exploitability
4.3
remediation
7.7
relevance
0.5
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.