CVE-2025-38534

Source
https://nvd.nist.gov/vuln/detail/CVE-2025-38534
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38534.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-38534
Downstream
Published
2025-08-16T11:12:27.014Z
Modified
2025-11-27T19:35:26.851961Z
Summary
netfs: Fix copy-to-cache so that it performs collection with ceph+fscache
Details

In the Linux kernel, the following vulnerability has been resolved:

netfs: Fix copy-to-cache so that it performs collection with ceph+fscache

The netfs copy-to-cache that is used by Ceph with local caching sets up a new request to write data just read to the cache. The request is started and then left to look after itself whilst the app continues. The request gets notified by the backing fs upon completion of the async DIO write, but then tries to wake up the app because NETFSRREQOFFLOAD_COLLECTION isn't set - but the app isn't waiting there, and so the request just hangs.

Fix this by setting NETFSRREQOFFLOAD_COLLECTION which causes the notification from the backing filesystem to put the collection onto a work queue instead.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/blob/ee626f5d79d5817bb21d6f048dc0da4c4e383443/cves/2025/38xxx/CVE-2025-38534.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e2d46f2ec332533816417b60933954173f602121
Fixed
1ebe58cef84eab22b41b4d5e72c2051ebf00af50
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e2d46f2ec332533816417b60933954173f602121
Fixed
4c238e30774e3022a505fa54311273add7570f13

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.14.0
Fixed
6.15.8