[LTP] cve: reproducer for cve-2026-64600

linuxtestproject.agent@gmail.com linuxtestproject.agent@gmail.com
Fri Jul 31 12:41:47 CEST 2026


Hi Andrea,

On Fri, 31 Jul 2026, Andrea Cervesato wrote:
> cve: reproducer for cve-2026-64600

> 	while (!stop_pressure) {
> 		SAFE_PWRITE(1, fd, wbuf, blksize, 0);
> 		SAFE_FTRUNCATE(fd, 0);
> 		SAFE_FSYNC(fd);
> 	}

Could the write be synced before the truncate? The truncate can discard the
dirty page and delayed allocation before writeback, so fsync() only persists
the empty file. This also differs from the documented
write/fdatasync/truncate sequence and may leave the XFS log without the
allocation pressure needed to widen the vulnerable window, causing false
passes on affected kernels.

Verdict - Needs revision

---
Note:

The agent can sometimes produce false positives although often its
findings are genuine. If you find issues with the review, please
comment this email or ignore the suggestions.

Regards,
LTP AI Reviewer


More information about the ltp mailing list