Linux Kernel Netfs Folio Private Handling Vulnerability

A vulnerability in the Linux kernel's netfs component has been addressed. The issue arose in the 'netfs_perform_write()' function, where 'folio->private' was not properly managed. This mismanagement could lead to multiple attachments of private data, causing reference leaks of folio structures and netfs groups. The vulnerability allowed for improper handling of private data attachments, potentially leading to memory leaks and mismanagement of netfs group references. The issue has been fixed by streamlining the process of marking a folio as up-to-date, ensuring proper management of the private data before setting a new group. Additionally, the content flushing behavior was corrected to avoid unnecessary data loss.

Impact

The vulnerability could cause memory leaks by improperly managing references to folio structures and netfs groups, potentially leading to increased memory usage and degradation of system performance.

Reproduction

The vulnerability can be reproduced by using a filesystem that mixes writes with netfs group management. This can be done by specifying netfs groups in a way that conflicts with the expected handling, such as mixing writes with and without group specifications, which can lead to improper management of the folio's private data.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.