CVE-2026-93252

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

ocfs2: fix circular locking dependency in ocfs2_init_acl()

A lockdep warning indicates a circular locking dependency between

`&oi->ip_xattr_sem` and `&journal->j_trans_barrier`:

WARNING: possible circular locking dependency detected

is trying to acquire lock:

(&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x2fd/0x7e0

fs/ocfs2/acl.c:367

but task is already holding lock:

(&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x3ab/0x700

fs/ocfs2/journal.c:369

The deadlock involves two code paths: Path 1 (setxattr) where

`ocfs2_xattr_set()` acquires `ip_xattr_sem` (write) and then starts a

transaction, which acquires `j_trans_barrier` (read); and Path 2

(mkdir/mknod) where `ocfs2_mknod()` starts a transaction (`j_trans_barrier`

read) and then calls `ocfs2_init_acl()`, which attempts to acquire

`ip_xattr_sem` (read) on the parent directory to retrieve the default ACL.

Because rw_semaphores are subjec

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References