CVE-2026-46256CWE-667

CVE-2026-46256

Medium · published June 3, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
2.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

NFS/localio: prevent direct reclaim recursion into NFS via nfs_writepages

LOCALIO is an NFS loopback mount optimization that avoids using the

network for READ, WRITE and COMMIT if the NFS client and server are

determined to be on the same system. But because LOCALIO is still

fundamentally "just NFS loopback mount" it is susceptible to recursion

deadlock via direct reclaim, e.g.: NFS LOCALIO down to XFS and then

back into NFS via nfs_writepages.

Fix LOCALIO's potential for direct reclaim deadlock by ensuring that

all its page cache allocations are done from GFP_NOFS context.

Thanks to Ben Coddington for pointing out commit ad22c7a043c2 ("xfs:

prevent stack overflows from page cache allocation").

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00135 · 2.7th percentile
Weakness
CWE-667 · Improper Locking
Published
2026-06-03T22:16Z
Affected products (2)
ProductVersionsFixed in
linux/linux_kernel≥ 6.12, < 6.18.146.18.14
linux/linux_kernel≥ 6.19, < 6.19.46.19.4
References (4)
EPSS history
Timeline
  • 03 JUN 15:49Z
    NFS/localio: prevent direct reclaim recursion into NFS via nfs_writepages
    cvelistv5