In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
erofs: remove fscache backend entirely<\/p>\n
EROFS over fscache was introduced to provide image lazy pulling
\nfunctionality. After the feature landed, the fscache subsystem made
\nnetfs a new hard dependency, which is unexpected for a local filesystem
\nand has an kernel-defined caching hierarchy which could be inflexible
\ncompared to the fanotify pre-content hooks. Therefore, this feature has
\nbeen deprecated for almost two years.<\/p>\n
As EROFS file-backed mounts and fanotify pre-content hooks both upstream
\nfor a while and already providing equivalent functionality (erofs-utils
\nhas supported fanotify pre-content hooks), let’s remove the fscache
\nbackend now.<\/p>\n
The main application of this feature is Nydus [1], and they plan to move
\nto use fanotify pre-content hooks in the near future too.<\/p>\n
I hope this patch can be merged into Linux 7.2, which is also motivated
\nby newly found implementation issues [2][3] that are not worth
\ninvestigating given the deprecation and limited development resources.
\nThe associated fscache\/cachefiles cleanup patch will follow separately
\nthrough the vfs tree (netfs) later: it seems fine since the codebase is
\nisolated by CONFIG_CACHEFILES_ONDEMAND.<\/p>\n
[1] https:\/\/github.com\/dragonflyoss\/nydus\/blob\/v2.1.0\/docs\/nydus-fscache.md
\n[2] https:\/\/github.com\/dragonflyoss\/nydus\/pull\/1824
\n[3] https:\/\/lore.kernel.org\/r\/20260619135800.1594811-1-michael.bommarito@gmail.com<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
erofs: remove fscache backend entirely<\/p>\n
EROFS over fscache was introduced to provide image lazy pulling
\nfunctionality. After the fe<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-17479","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/17479","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=17479"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=17479"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=17479"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}