Linux Kernel Writeback Throttling Race Condition Vulnerability

Vulnerability

A race condition vulnerability has been identified in the Linux kernel's writeback throttling (WBT) mechanism. This issue arises when the function 'wbt_enable_default()' is executed outside of the queue freezing process, leading to the WBT inflight counter becoming negative. This negative value causes tasks in the writeback path to hang, as they become stuck waiting for a condition that can no longer be satisfied. The vulnerability occurs because 'wbt_enable_default()' can conflict with I/O operations, allowing the counter to decrease before it is properly initialized. As a result, the system may generate warnings about hung tasks, indicating a disruption in normal processing.

Impact

The vulnerability can cause tasks to hang indefinitely in the writeback process, leading to warnings about hung task states. This disruption can interfere with normal system operations, particularly in handling I/O processes.

Remediation

The vulnerability has been addressed in the Linux kernel. Users can apply the latest patches available in the Linux kernel stable tree to mitigate this issue.

Added: Jan 13, 2026, 6:03 PM
Updated: Jan 13, 2026, 6:03 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
3.5
remediation
7.7
relevance
1.9
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.