linux: In the Linux kernel, the following vulnerability has been resolved: gfs2: Prevent recursive memory reclaim Function...
CVE-2025-68356 is fixed in 49 products on 1 platform, first by DEBIAN-CVE-2025-68356, released December 24, 2025. It is not reported as exploited. Patch Radar priority: Routine.
In the Linux kernel, the following vulnerability has been resolved: gfs2: Prevent recursive memory reclaim Function new_inode() returns a new inode with inode->i_mapping->gfp_mask set to GFP_HIGHUSER_MOVABLE. This value includes the __GFP_FS flag, so allocations in that address space can recurse into filesystem memory reclaim. We don't want that to happen because it can consume a significant amount of stack memory. Worse than that is that it can also deadlock: for example, in several places, gfs2_unstuff_dinode() is called inside filesystem transactions. This calls filemap_grab_folio(), which can allocate a new folio, which can trigger memory reclaim. If memory reclaim recurses into the filesystem and starts another transaction, a deadlock will ensue. To fix these kinds of problems, prevent memory reclaim from recursing into filesystem code by making sure that the gfp_mask of inode address spaces doesn't include __GFP_FS. The "meta" and resource group address spaces were already using GFP_NOFS as their gfp_mask (which doesn't include __GFP_FS). The default value of GFP_HIGHUSER_MOVABLE is less restrictive than GFP_NOFS, though. To avoid being overly limiting, use the default value and only knock off the __GFP_FS flag. I'm not sure if this will actually make a difference, but it also shouldn't hurt. This patch is loosely based on commit ad22c7a043c2 ("xfs: prevent stack overflows from page cache allocation"). Fixes xfstest generic/273.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| dtb-aarch64 · opensuse-leap 16.0 | 6.12.0-160000.26.1 | OPENSUSE-SU-2026:20287-1 | Feb 27, 2026 |
| kernel-64kb · opensuse-leap 16.0 | 6.12.0-160000.26.1 | OPENSUSE-SU-2026:20287-1 | Feb 27, 2026 |
| kernel-64kb · sles 16.0 | 6.12.0-160000.26.1 | SUSE-SU-2026:20599-1 | Feb 27, 2026 |
| kernel-azure · opensuse-leap 16.0 | 6.12.0-160000.26.1 | OPENSUSE-SU-2026:20287-1 | Feb 27, 2026 |
| kernel-azure · sles 16.0 | 6.12.0-160000.26.1 | SUSE-SU-2026:20599-1 | Feb 27, 2026 |
| kernel-default · opensuse-leap 16.0 | 6.12.0-160000.26.1 | OPENSUSE-SU-2026:20287-1 | Feb 27, 2026 |
| kernel-default · sles 16.0 | 6.12.0-160000.26.1 | SUSE-SU-2026:20599-1 | Feb 27, 2026 |
| kernel-default-base · opensuse-leap 16.0 | 6.12.0-160000.26.1.160000.2.7 | OPENSUSE-SU-2026:20287-1 | Feb 27, 2026 |
| kernel-default-base · sles 16.0 | 6.12.0-160000.26.1.160000.2.7 | SUSE-SU-2026:20599-1 | Feb 27, 2026 |
| kernel-docs · opensuse-leap 16.0 | 6.12.0-160000.26.1 | OPENSUSE-SU-2026:20287-1 | Feb 27, 2026 |
| kernel-docs · sles 16.0 | 6.12.0-160000.26.1 | SUSE-SU-2026:20599-1 | Feb 27, 2026 |
| kernel-kvmsmall · opensuse-leap 16.0 | 6.12.0-160000.26.1 | OPENSUSE-SU-2026:20287-1 | Feb 27, 2026 |
| kernel-kvmsmall · sles 16.0 | 6.12.0-160000.26.1 | SUSE-SU-2026:20599-1 | Feb 27, 2026 |
| kernel-obs-build · opensuse-leap 16.0 | 6.12.0-160000.26.1 | OPENSUSE-SU-2026:20287-1 | Feb 27, 2026 |
| kernel-obs-qa · opensuse-leap 16.0 | 6.12.0-160000.26.1 | OPENSUSE-SU-2026:20287-1 | Feb 27, 2026 |
| kernel-obs-qa · sles 16.0 | 6.12.0-160000.26.1 | SUSE-SU-2026:20599-1 | Feb 27, 2026 |
| kernel-rt · opensuse-leap 16.0 | 6.12.0-160000.26.1 | OPENSUSE-SU-2026:20287-1 | Feb 27, 2026 |
| kernel-source · opensuse-leap 16.0 | 6.12.0-160000.26.1 | OPENSUSE-SU-2026:20287-1 | Feb 27, 2026 |
| kernel-source · sles 16.0 | 6.12.0-160000.26.1 | SUSE-SU-2026:20599-1 | Feb 27, 2026 |
| kernel-syms · opensuse-leap 16.0 | 6.12.0-160000.26.1 | OPENSUSE-SU-2026:20287-1 | Feb 27, 2026 |
| kernel-syms · sles 16.0 | 6.12.0-160000.26.1 | SUSE-SU-2026:20599-1 | Feb 27, 2026 |
| kernel-uek · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-core · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-core · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-debug · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-debug · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-debug-core · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-debug-core · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-debug-devel · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-debug-devel · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-debug-modules · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-debug-modules · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-debug-modules-core · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-debug-modules-core · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-debug-modules-deprecated · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-debug-modules-deprecated · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-debug-modules-desktop · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-debug-modules-desktop · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-debug-modules-extra · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-debug-modules-extra · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-debug-modules-extra-netfilter · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-debug-modules-extra-netfilter · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-debug-modules-usb · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-debug-modules-usb · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-debug-modules-wireless · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-debug-modules-wireless · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-devel · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-devel · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-doc · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-doc · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-modules · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-modules · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-modules-core · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-modules-core · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-modules-deprecated · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-modules-deprecated · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-modules-desktop · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-modules-desktop · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-modules-extra · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-modules-extra · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-modules-extra-netfilter · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-modules-extra-netfilter · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-modules-usb · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-modules-usb · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-modules-wireless · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-modules-wireless · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-tools · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek-tools · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek64k · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek64k · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek64k-core · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek64k-core · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek64k-devel · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek64k-devel · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek64k-modules · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek64k-modules · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek64k-modules-core · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek64k-modules-core · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek64k-modules-deprecated · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek64k-modules-deprecated · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek64k-modules-desktop · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek64k-modules-desktop · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek64k-modules-extra · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek64k-modules-extra · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek64k-modules-extra-netfilter · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek64k-modules-extra-netfilter · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek64k-modules-usb · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek64k-modules-usb · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek64k-modules-wireless · ol 10 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-uek64k-modules-wireless · ol 9 | 0:6.12.0-108.64.6.3.el9uek | ELSA-2026-50112 | Feb 20, 2026 |
| kernel-zfcpdump · opensuse-leap 16.0 | 6.12.0-160000.26.1 | OPENSUSE-SU-2026:20287-1 | Feb 27, 2026 |
| kernel-zfcpdump · sles 16.0 | 6.12.0-160000.26.1 | SUSE-SU-2026:20599-1 | Feb 27, 2026 |
| linux · Debian 13.5 (trixie) | 6.12.63-1 | DEBIAN-CVE-2025-68356 | Dec 24, 2025 |
| linux · Debian 14 | 6.17.13-1 | DEBIAN-CVE-2025-68356 | Dec 24, 2025 |