CVE Explorer
CVE-2026-31598
In the Linux kernel, the following vulnerability has been resolved:
ocfs2: fix possible deadlock between unlink and dio_end_io_write
ocfs2_unlink takes orphan dir inode_lock first and then ip_alloc_sem,
while in ocfs2_dio_end_io_write, it acquires these locks in reverse order.
This creates an ABBA lock ordering violation on lock classes
ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE] and
ocfs2_file_ip_alloc_sem_key.
Lock Chain #0 (orphan dir inode_lock -> ip_alloc_sem):
ocfs2_unlink
ocfs2_p
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1
Preserved source conflicts
No provider value was silently selected as the winner.
affected · 2 assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["fs/ocfs2/aops.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.6"},{"lessThan":"4.6","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOrEqual…
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:387b5d6a2236fcc7711bd962bfc49ab2b8b1ad2e4445e14938c5174edaafa824 · sha256:4285179836862795… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/ocfs2/aops.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"297d8d7bb6a2bf133d3a3636edbdf94101cbd719","status":"affected","version":"a86a72a4a4e0ec109a98e2737948864ed6794bf7","versionType":"git"},{"lessThan":"32630dee18c6bb2175c8a865a474749492eaf19c","status":"affected","version":"a86a72a4a4e0ec109a98e2737948864ed6794bf7","versionType":"git"},{"lessThan":"93f35419eb84d58820040642cb6e7528fe4aba7a","status":"affected","version":"a86a72a4a4e0ec109a98e273794886…
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:387b5d6a2236fcc7711bd962bfc49ab2b8b1ad2e4445e14938c5174edaafa824 · sha256:4285179836862795… · /containers/cna/affected/0
Affected products and versions
2 source assertions{"defaultStatus":"affected","product":"Linux","programFiles":["fs/ocfs2/aops.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.6"},{"lessThan":"4.6","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOrEqual…
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:387b5d6a2236fcc7711bd962bfc49ab2b8b1ad2e4445e14938c5174edaafa824 · sha256:4285179836862795… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/ocfs2/aops.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"297d8d7bb6a2bf133d3a3636edbdf94101cbd719","status":"affected","version":"a86a72a4a4e0ec109a98e2737948864ed6794bf7","versionType":"git"},{"lessThan":"32630dee18c6bb2175c8a865a474749492eaf19c","status":"affected","version":"a86a72a4a4e0ec109a98e2737948864ed6794bf7","versionType":"git"},{"lessThan":"93f35419eb84d58820040642cb6e7528fe4aba7a","status":"affected","version":"a86a72a4a4e0ec109a98e273794886…
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:387b5d6a2236fcc7711bd962bfc49ab2b8b1ad2e4445e14938c5174edaafa824 · sha256:4285179836862795… · /containers/cna/affected/0
Provider-owned CVSS observations
1 source assertion{"metric":{"baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:387b5d6a2236fcc7711bd962bfc49ab2b8b1ad2e4445e14938c5174edaafa824 · sha256:4285179836862795… · /containers/cna/metrics/0/cvssV3_1
Source references
9 source assertions{"url":"https://git.kernel.org/stable/c/297d8d7bb6a2bf133d3a3636edbdf94101cbd719"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:387b5d6a2236fcc7711bd962bfc49ab2b8b1ad2e4445e14938c5174edaafa824 · sha256:4285179836862795… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/2b884d52273c60c298bd570163e8053657bbaff6"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:387b5d6a2236fcc7711bd962bfc49ab2b8b1ad2e4445e14938c5174edaafa824 · sha256:4285179836862795… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/32630dee18c6bb2175c8a865a474749492eaf19c"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:387b5d6a2236fcc7711bd962bfc49ab2b8b1ad2e4445e14938c5174edaafa824 · sha256:4285179836862795… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/4b80b5a838a32437f2cae0662578bac216a2c51a"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:387b5d6a2236fcc7711bd962bfc49ab2b8b1ad2e4445e14938c5174edaafa824 · sha256:4285179836862795… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/93f35419eb84d58820040642cb6e7528fe4aba7a"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:387b5d6a2236fcc7711bd962bfc49ab2b8b1ad2e4445e14938c5174edaafa824 · sha256:4285179836862795… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/b02da26a992db0c0e2559acbda0fc48d4a2fd337"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:387b5d6a2236fcc7711bd962bfc49ab2b8b1ad2e4445e14938c5174edaafa824 · sha256:4285179836862795… · /containers/cna/references/8
{"url":"https://git.kernel.org/stable/c/bc0fb5c7d54c78be43a536df0e20dee32adb27d3"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:387b5d6a2236fcc7711bd962bfc49ab2b8b1ad2e4445e14938c5174edaafa824 · sha256:4285179836862795… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/e049f7a9bd80b7319590789ea5e1c523d6339d91"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:387b5d6a2236fcc7711bd962bfc49ab2b8b1ad2e4445e14938c5174edaafa824 · sha256:4285179836862795… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/f9fb1a7b635849322e1d7b7b6b26389778ec8e82"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:387b5d6a2236fcc7711bd962bfc49ab2b8b1ad2e4445e14938c5174edaafa824 · sha256:4285179836862795… · /containers/cna/references/6
Attribution and limitations
- CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →
Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.