{"id":"CVE-2026-43262","title":"gfs2: fiemap page fault fix","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ngfs2: fiemap page fault fix\n\nIn gfs2_fiemap(), we are calling iomap_fiemap() while holding the inode\nglock.  This can lead to recursive glock taking if the fiemap buffe…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= e9079cce201784632aed4b1a3121ee38c1ced0b6 < 5d5d9ec957bfa1eb2b05861c19f5d701dd006db7","Linux >= e9079cce201784632aed4b1a3121ee38c1ced0b6 < cead3bebf3e318578b8a86a5472015d713d2a8a8","Linux >= e9079cce201784632aed4b1a3121ee38c1ced0b6 < e428670cfb2993d8c224effd076242ca6b0950de","Linux >= e9079cce201784632aed4b1a3121ee38c1ced0b6 < 5d2c4f182ea8516de8682e2b60411c03df00e3ea","Linux >= e9079cce201784632aed4b1a3121ee38c1ced0b6 < 2e121c53b581e40397ae08090a7af4ed10781fbc","Linux >= e9079cce201784632aed4b1a3121ee38c1ced0b6 < 9d15fee888f0e8938c9aeed71ec9c2cbba0c88ab","Linux >= e9079cce201784632aed4b1a3121ee38c1ced0b6 < e411d74cc5ba290f85d0dd5e4d1df8f1d6d975d2","Linux 2.6.29"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T15:32:20.379943Z"},"published":"2026-05-06","updated":"2026-11-06","sourceUpdated":"2026-11-06T15:42:44.814Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-43262","references":[{"url":"https://git.kernel.org/stable/c/5d5d9ec957bfa1eb2b05861c19f5d701dd006db7"},{"url":"https://git.kernel.org/stable/c/cead3bebf3e318578b8a86a5472015d713d2a8a8"},{"url":"https://git.kernel.org/stable/c/e428670cfb2993d8c224effd076242ca6b0950de"},{"url":"https://git.kernel.org/stable/c/5d2c4f182ea8516de8682e2b60411c03df00e3ea"},{"url":"https://git.kernel.org/stable/c/2e121c53b581e40397ae08090a7af4ed10781fbc"},{"url":"https://git.kernel.org/stable/c/9d15fee888f0e8938c9aeed71ec9c2cbba0c88ab"},{"url":"https://git.kernel.org/stable/c/e411d74cc5ba290f85d0dd5e4d1df8f1d6d975d2"}],"tags":["cve.org"],"epss":0.00114,"epssPercentile":0.01495,"ingestedAt":"2026-11-06T15:54:03.962Z","slug":"CVE-2026-43262","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ngfs2: fiemap page fault fix\n\nIn gfs2_fiemap(), we are calling iomap_fiemap() while holding the inode\nglock.  This can lead to recursive glock taking if the fiemap buffer is\nmemory mapped to the same inode and accessing it triggers a page fault.\n\nFix by disabling page faults for iomap_fiemap() and faulting in the\nbuffer by hand if necessary.\n\nFixes xfstest generic/742.\n\n## Affected\n\n- `Linux >= e9079cce201784632aed4b1a3121ee38c1ced0b6 < 5d5d9ec957bfa1eb2b05861c19f5d701dd006db7`\n- `Linux >= e9079cce201784632aed4b1a3121ee38c1ced0b6 < cead3bebf3e318578b8a86a5472015d713d2a8a8`\n- `Linux >= e9079cce201784632aed4b1a3121ee38c1ced0b6 < e428670cfb2993d8c224effd076242ca6b0950de`\n- `Linux >= e9079cce201784632aed4b1a3121ee38c1ced0b6 < 5d2c4f182ea8516de8682e2b60411c03df00e3ea`\n- `Linux >= e9079cce201784632aed4b1a3121ee38c1ced0b6 < 2e121c53b581e40397ae08090a7af4ed10781fbc`\n- `Linux >= e9079cce201784632aed4b1a3121ee38c1ced0b6 < 9d15fee888f0e8938c9aeed71ec9c2cbba0c88ab`\n- `Linux >= e9079cce201784632aed4b1a3121ee38c1ced0b6 < e411d74cc5ba290f85d0dd5e4d1df8f1d6d975d2`\n- `Linux 2.6.29`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}