Linux Kernel Vulnerability Affecting GFS2 Quota Management

CVE-2026-97521

What is CVE-2026-97521?

A vulnerability in the Linux kernel's GFS2 file system affects its quota management. Specifically, the gfs2_quota_init() function improperly checks for duplicate quota_change IDs while holding critical locks. Under the PREEMPT_RT preemptible kernel configuration, this can lead to instances where sleeping functions are erroneously called in an invalid context, potentially compromising system stability. The issue has been addressed by implementing a no-ref bucket lookup, allowing for safe duplicate handling, and ensuring the integrity of the locking mechanism during quota operations.

References