CVE-2026-46061

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

jbd2: fix deadlock in jbd2_journal_cancel_revoke()

Commit f76d4c28a46a ("fs/jbd2: use sleeping version of

__find_get_block()") changed jbd2_journal_cancel_revoke() to use

__find_get_block_nonatomic() which holds the folio lock instead of

i_private_lock. This breaks the lock ordering (folio -> buffer) and

causes an ABBA deadlock when the filesystem blocksize < pagesize:

T1 T2

ext4_mkdir()

ext4_init_new_dir()

ext4_append()

ext4_getblk()

lock_buffer() <- A

sync_blockdev()

blkdev_writepages()

writeback_iter()

writeback_get_folio()

folio_lock() <- B

ext4_journal_get_create_access()

jbd2_journal_cancel_revoke()

__find_get_block_nonatomic()

folio_lock() <- B

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References