Description
In the Linux kernel, the following vulnerability has been resolved:
xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN
When exchanging two full-file ranges, xmi_can_exchange_reflink_flags()
can move the reflink inode flag from the file that currently has it to
the other file, as long as exactly one side is marked. This assumes
that the file contents, and therefore all shared extents, are exchanged.
That assumption is not true when XFS_EXCHMAPS_INO1_WRITTEN is set.
xfs_exchmaps_can_skip_mapping() can skip hole and unwritten mappings
from file1, so an exchange can complete without moving every mapping
that the earlier flag-swap decision accounted for. In that case the
post-operation cleanup can clear the reflink flag from an inode that
still owns shared written extents. Later writes then take the
non-reflink write path and may update blocks that should still have
been protected by CoW, which shows up as data corruption between
reflink-related files.
Fix this by disabling the reflink flag exchange whenever
XFS_EXCHMAPS_INO1_WRITTEN is requested. The contents exchange can still
proceed; the conservative outcome is that both inodes keep the reflink
flag. The regular reflink flag cleanup path can drop the extra flag
later once the inode no longer has shared extents.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 6.10 | 6.12.111 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 7.2.7-1 | — |
| Debian 13 | linux | 6.12.111-1 | — |
| Debian 12 | linux-6.12 | 6.12.111-1~deb12u1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.04 LTS | linux | 7.0.0-42.42 | USN-8959-1 |
| Ubuntu 26.04 LTS | linux-aws | 7.0.0-1016.17 | USN-8959-1 |
| Ubuntu 26.04 LTS | linux-azure | 7.0.0-1020.21 | USN-9019-1 |
| Ubuntu 26.04 LTS | linux-azure-fde | 7.0.0-1019.19 | USN-9020-1 |
| Ubuntu 26.04 LTS | linux-gcp | 7.0.0-1016.18 | USN-8959-1 |
| Ubuntu 26.04 LTS | linux-gke | 7.0.0-1010.11 | USN-9020-1 |
| Ubuntu 26.04 LTS | linux-ibm +1 | 7.0.0-1017.17 | USN-8960-1, USN-8959-1 |
| Ubuntu 26.04 LTS | linux-nvidia +1 | No fix yet | — |
| Ubuntu 26.04 LTS | linux-oracle | 7.0.0-1015.16 | USN-8959-1 |
| Ubuntu 26.04 LTS | linux-raspi | 7.0.0-1023.23 | USN-9021-1 |
| Ubuntu 26.04 LTS | linux-realtime | 7.0.0-43.43.1 | USN-9020-1 |
| Ubuntu 26.04 LTS | linux-riscv | 7.0.0-42.42.1 | — |
| Ubuntu 24.04 LTS | linux-aws-7.0 | 7.0.0-1017.18~24.04.1 | USN-9020-1 |
| Ubuntu 24.04 LTS | linux-azure-fde-7.0 | 7.0.0-1019.19~24.04.1 | USN-9020-1 |
| Ubuntu 24.04 LTS | linux-gcp-7.0 | 7.0.0-1017.19~24.04.1 | USN-9020-1 |
| Ubuntu 24.04 LTS | linux-hwe-7.0 | 7.0.0-42.42~24.04.1 | USN-8959-1 |
| Ubuntu 24.04 LTS | linux-oracle-7.0 | 7.0.0-1016.18~24.04.1 | USN-9020-1 |
| Ubuntu 24.04 LTS | linux-riscv +29 | No fix yet | — |
| Ubuntu 24.04 LTS | linux-riscv-7.0 | 7.0.0-42.42.1~24.04.1 | — |
| Ubuntu 22.04 LTS | linux-riscv +32 | No fix yet | — |
| Ubuntu 20.04 LTS | linux-gke +28 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.14 +1 | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_0 | 21-160000.4.3 | SUSE-SU-2026:24672-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_1 | 19-160000.1.1 | SUSE-SU-2026:24678-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_12 +1 | 8-160000.1.1 | SUSE-SU-2026:24679-1, SUSE-SU-2026:24664-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_13 | 8-160000.1.2 | SUSE-SU-2026:24668-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_15 | 6-160000.1.1 | SUSE-SU-2026:24681-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_16 | 5-160000.1.1 | SUSE-SU-2026:24666-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_2 | 17-160000.1.1 | SUSE-SU-2026:24671-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_3 | 16-160000.1.1 | SUSE-SU-2026:24677-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_4 | 15-160000.1.1 | SUSE-SU-2026:24670-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_5 | 14-160000.1.1 | SUSE-SU-2026:24676-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_6 | 13-160000.1.1 | SUSE-SU-2026:24667-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_7 | 12-160000.1.1 | SUSE-SU-2026:24680-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_8 | 11-160000.1.1 | SUSE-SU-2026:24675-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_9 +2 | 10-160000.1.1 | SUSE-SU-2026:24674-1, SUSE-SU-2026:24669-1, SUSE-SU-2026:24663-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_0 | 21-160000.4.3 | SUSE-SU-2026:24672-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_1 | 19-160000.1.1 | SUSE-SU-2026:24678-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_12 +1 | 8-160000.1.1 | SUSE-SU-2026:24679-1, SUSE-SU-2026:24664-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_13 | 8-160000.1.2 | SUSE-SU-2026:24668-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_15 | 6-160000.1.1 | SUSE-SU-2026:24681-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_16 | 5-160000.1.1 | SUSE-SU-2026:24666-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_2 | 17-160000.1.1 | SUSE-SU-2026:24671-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_3 | 16-160000.1.1 | SUSE-SU-2026:24677-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_4 | 15-160000.1.1 | SUSE-SU-2026:24670-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_5 | 14-160000.1.1 | SUSE-SU-2026:24676-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_6 | 13-160000.1.1 | SUSE-SU-2026:24667-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_7 | 12-160000.1.1 | SUSE-SU-2026:24680-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_8 | 11-160000.1.1 | SUSE-SU-2026:24675-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_9 +2 | 10-160000.1.1 | SUSE-SU-2026:24674-1, SUSE-SU-2026:24669-1, SUSE-SU-2026:24663-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16-RT_Update_0 | 19-160000.3.4 | SUSE-SU-2026:24538-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16-RT_Update_1 | 18-160000.1.1 | SUSE-SU-2026:24537-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_0 | 21-160000.4.3 | SUSE-SU-2026:24630-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_1 | 19-160000.1.1 | SUSE-SU-2026:24636-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_12 +4 | 8-160000.1.1 | SUSE-SU-2026:24637-1, SUSE-SU-2026:24621-1, SUSE-SU-2026:24526-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_13 | 8-160000.1.2 | SUSE-SU-2026:24626-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_15 +1 | 6-160000.1.1 | SUSE-SU-2026:24639-1, SUSE-SU-2026:24523-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_16 +1 | 5-160000.1.1 | SUSE-SU-2026:24623-1, SUSE-SU-2026:24522-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_2 | 17-160000.1.1 | SUSE-SU-2026:24629-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_3 +1 | 16-160000.1.1 | SUSE-SU-2026:24635-1, SUSE-SU-2026:24536-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_4 +2 | 15-160000.1.1 | SUSE-SU-2026:24628-1, SUSE-SU-2026:24535-1, SUSE-SU-2026:24533-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_5 +1 | 14-160000.1.1 | SUSE-SU-2026:24634-1, SUSE-SU-2026:24534-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_6 +1 | 13-160000.1.1 | SUSE-SU-2026:24624-1, SUSE-SU-2026:24532-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_7 +1 | 12-160000.1.1 | SUSE-SU-2026:24638-1, SUSE-SU-2026:24531-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_8 +1 | 11-160000.1.1 | SUSE-SU-2026:24633-1, SUSE-SU-2026:24530-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_9 +5 | 10-160000.1.1 | SUSE-SU-2026:24632-1, SUSE-SU-2026:24627-1, SUSE-SU-2026:24620-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | kernel-source | 7.2.9-1.1 | openSUSE-SU-2026:12074-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | kernel-livepatch-6.18.48-107.148 +1 | 1:1.0-0.amzn2023 | ALAS2023-2026-3196, ALAS2023-2026-3139 |
| Amazon Linux 2023 | perf6.12 +11 | 1:6.12.110-135.201.amzn2023 | ALAS2023-2026-3196 |
| Amazon Linux 2023 | perf6.18 +12 | 1:6.18.48-107.148.amzn2023 | ALAS2023-2026-3139 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | kernel-uek +34 | 6.12.0-207.111.5.1.el10uek | ELSA-2026-500374 |
Advisories 50
- USN-9021-1 linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- WID-SEC-2026-3579 Linux Kernel: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 12, 2026
- USN-9020-1 linux-aws-7.0, linux-azure-fde, linux-azure-fde-7.0, linux-gcp-7.0, linux-gke, linux-oracle-7.0, linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-8959-1 linux, linux-aws, linux-gcp, linux-hwe-7.0, linux-ibm, linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- SUSE-SU-2026:24681-1 Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24679-1 Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24680-1 Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24678-1 Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24676-1 Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24669-1 Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24677-1 Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24667-1 Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24675-1 Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24674-1 Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24671-1 Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24672-1 Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24670-1 Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24668-1 Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24666-1 Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24664-1 Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24663-1 Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24639-1 Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24636-1 Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24633-1 Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24635-1 Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24634-1 Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24632-1 Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24630-1 Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24629-1 Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24638-1 Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24637-1 Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24627-1 Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24626-1 Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24624-1 Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24621-1 Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24623-1 Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24620-1 Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24628-1 Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- USN-9019-1 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-8960-1 linux-oem-7.0 vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- SUSE-SU-2026:24530-1 Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 5, 2026
- SUSE-SU-2026:24538-1 Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 5, 2026
- SUSE-SU-2026:24534-1 Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 5, 2026
- SUSE-SU-2026:24535-1 Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 5, 2026
- SUSE-SU-2026:24536-1 Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 5, 2026
- SUSE-SU-2026:24537-1 Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 5, 2026
- SUSE-SU-2026:24522-1 Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 5, 2026
- SUSE-SU-2026:24531-1 Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 5, 2026
- SUSE-SU-2026:24532-1 Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 5, 2026
- SUSE-SU-2026:24533-1 Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 5, 2026