In the Linux kernel, the following vulnerability has been resolved: fs: avoid repeated scans in evict_inodes() We observed hung tasks when users… (CVE-2026-98924)

The Linux kernel vulnerability involved the evict_inodes() function repeatedly scanning the same inodes when users attempted to unmount a filesystem after its disk was removed but still in use. This occurred because evict_inodes() dropped and reacquired the s_inode_list_lock during its walk, restarting from the list head and repeatedly scanning referenced inodes without reclaiming them. This behavior could hold the s_umount lock for extended periods, blocking concurrent unmount attempts and causing hung tasks. The fix keeps the current inode marked I_FREEING out of the disposal batch until the lock is reacquired, allowing the walk to resume from that inode and properly dispose of it later. This preserves inode eviction behavior without losing lazy timestamp updates or causing premature eviction. Testing with xfstests on ext4 and XFS filesystems showed no new issues and resolved the previously reproducible hung task.

The vulnerability caused system hangs during unmount operations after disk removal, potentially blocking filesystem unmounts and triggering hung-task reports. This could degrade system stability and availability during device removal scenarios. No evidence of exploitation or data corruption is indicated.

A patch has been applied to the Linux kernel to address this issue. Users should update to a kernel version that includes this fix to prevent hung tasks during unmount operations after disk removal. No additional mitigation actions are indicated.