[OpenAFS] dirtyflag vulnerability and OpenAFS
Jeffrey E Altman
jaltman@auristor.com
Fri, 8 May 2026 07:20:50 -0400
--------------ms000901000201010909020008
Content-Type: multipart/alternative;
boundary="------------2vNnIMSr3FGl80z0VNX0qCpi"
--------------2vNnIMSr3FGl80z0VNX0qCpi
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: base64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--------------2vNnIMSr3FGl80z0VNX0qCpi
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE html>
<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DUTF=
-8">
</head>
<body>
<p><font face=3D"Gill Sans MT">Hello Matteo,</font></p>
<p><font face=3D"Gill Sans MT"><br>
</font></p>
<p><font face=3D"Gill Sans MT">OpenAFS does not use the Linux rxrpc
module for its network communications.=C2=A0 Instead it embeds it=
s
own Rx RPC implementation within the openafs.ko module.</font></p=
>
<p><font face=3D"Gill Sans MT"><br>
</font></p>
<p><font face=3D"Gill Sans MT">Linux AFS (kafs) on the other hand
relies upon the rxrpc.ko module for its network communications.</=
font></p>
<p><font face=3D"Gill Sans MT"><br>
</font></p>
<p><font face=3D"Gill Sans MT">The mailing list for discussion of
Linux AFS and Rx RPC is <a class=3D"moz-txt-link-abbreviated" hre=
f=3D"mailto:linux-afs@lists.infradead.org">linux-afs@lists.infradead.org<=
/a>.</font></p>
<p><font face=3D"Gill Sans MT"><br>
</font></p>
<p><font face=3D"Gill Sans MT">I've cc'd this message to that list as=
well as adding the rxrpc.ko maintainers.</font></p>
<p><font face=3D"Gill Sans MT"><br>
</font></p>
<p><font face=3D"Gill Sans MT">Jeffrey Altman</font></p>
<p><font face=3D"Gill Sans MT"><br>
</font></p>
<div class=3D"moz-cite-prefix">On 5/8/2026 4:33 AM, Matteo Fois wrote=
:<br>
</div>
<blockquote type=3D"cite"
cite=3D"mid:VI1PR02MB10149A632BBC6D3EB98F84B0FFD3D2@VI1PR02MB10149.eurprd=
02.prod.outlook.com">
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DU=
TF-8">
<style type=3D"text/css" style=3D"display:none;">P {margin-top:0;ma=
rgin-bottom:0;}</style>
<div class=3D"elementToProof"
style=3D"font-family: Aptos, "Aptos_EmbeddedFont", "Aptos_=
MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; col=
or: rgb(0, 0, 0);">
Good Morning,</div>
<div class=3D"elementToProof"
style=3D"font-family: Aptos, "Aptos_EmbeddedFont", "Aptos_=
MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; col=
or: rgb(0, 0, 0);">
I'm a researcher at ENEA (Italy) and we use the OpenAFS
filesystem extensively in our facilities.</div>
<div class=3D"elementToProof"
style=3D"font-family: Aptos, "Aptos_EmbeddedFont", "Aptos_=
MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; col=
or: rgb(0, 0, 0);">
This morning we discovered the dirtyflags vulnerability (<a
href=3D"https://github.com/V4bel/dirtyfrag"
id=3D"OWA3fc1afa7-d272-ff97-95d3-4d8cfe7cbb1e"
class=3D"OWAAutoLink moz-txt-link-freetext"
moz-do-not-send=3D"true">https://github.com/V4bel/dirtyfrag</a>=
)
and quicky patched our machines.</div>
<div class=3D"elementToProof"
style=3D"font-family: Aptos, "Aptos_EmbeddedFont", "Aptos_=
MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; col=
or: rgb(0, 0, 0);">
<br>
</div>
<div class=3D"elementToProof"
style=3D"font-family: Aptos, "Aptos_EmbeddedFont", "Aptos_=
MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; col=
or: rgb(0, 0, 0);">
The patch works by blacklisting and removing the following
kernel modules: esp4 esp6 rxrpc</div>
<div class=3D"elementToProof"
style=3D"font-family: Aptos, "Aptos_EmbeddedFont", "Aptos_=
MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; col=
or: rgb(0, 0, 0);">
The last module rxrpc we understand that it's used by OpenAFS (<a=
href=3D"https://docs.kernel.org/networking/rxrpc.html"
moz-do-not-send=3D"true" class=3D"moz-txt-link-freetext">https:=
//docs.kernel.org/networking/rxrpc.html</a>)</div>
<div class=3D"elementToProof"
style=3D"font-family: Aptos, "Aptos_EmbeddedFont", "Aptos_=
MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; col=
or: rgb(0, 0, 0);">
<br>
</div>
<div class=3D"elementToProof"
style=3D"font-family: Aptos, "Aptos_EmbeddedFont", "Aptos_=
MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; col=
or: rgb(0, 0, 0);">
We are able to use the filesystem and it seems to be working
properly after the patch, but we were wondering if there are
more subtle side effects, for example in performance.</div>
<div class=3D"elementToProof"
style=3D"font-family: Aptos, "Aptos_EmbeddedFont", "Aptos_=
MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; col=
or: rgb(0, 0, 0);">
Also we were curious to know what happens if one uses the kafs
kernel module instead of the OpenAFS client, does the
blacklisted module create any problem?</div>
<div class=3D"elementToProof"
style=3D"font-family: Aptos, "Aptos_EmbeddedFont", "Aptos_=
MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; col=
or: rgb(0, 0, 0);">
<br>
</div>
<div class=3D"elementToProof"
style=3D"font-family: Aptos, "Aptos_EmbeddedFont", "Aptos_=
MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; col=
or: rgb(0, 0, 0);">
Thanks,</div>
<div class=3D"elementToProof"
style=3D"font-family: Aptos, "Aptos_EmbeddedFont", "Aptos_=
MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; col=
or: rgb(0, 0, 0);">
<br>
</div>
<div class=3D"elementToProof"
style=3D"font-family: Aptos, "Aptos_EmbeddedFont", "Aptos_=
MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; col=
or: rgb(0, 0, 0);">
Matteo</div>
<div class=3D"elementToProof"
style=3D"font-family: Aptos, "Aptos_EmbeddedFont", "Aptos_=
MSFontService", Calibri, Helvetica, sans-serif; font-size: 12pt; col=
or: rgb(0, 0, 0);">
<br>
</div>
<br>
<br>
<hr>
<p
style=3D"font-family: Arial, Helvetica, sans-serif; font-size: 13px">Ques=
to
messaggio e i suoi allegati sono indirizzati esclusivamente alle
persone indicate e la casella di posta elettronica da cui =C3=A8
stata inviata =C3=A8 da qualificarsi quale strumento aziendale.
</p>
<p
style=3D"font-family: Arial, Helvetica, sans-serif; font-size: 13px">La
diffusione, copia o qualsiasi altra azione derivante dalla
conoscenza di queste informazioni sono rigorosamente vietate
(art. 616 c.p, D.Lgs. n. 196/2003 s.m.i. e GDPR Regolamento - UE
2016/679). </p>
<p
style=3D"font-family: Arial, Helvetica, sans-serif; font-size: 13px">Qual=
ora
abbiate ricevuto questo documento per errore siete cortesemente
pregati di darne immediata comunicazione al mittente e di
provvedere alla sua distruzione. Grazie.
<br>
</p>
<p
style=3D"font-family: Arial, Helvetica, sans-serif; font-size: 13px">This=
e-mail and any attachments is confidential and may contain
privileged information intended for the addressee(s) only.
</p>
<p
style=3D"font-family: Arial, Helvetica, sans-serif; font-size: 13px">Diss=
emination,
copying, printing or use by anybody else is unauthorised (art.
616 c.p, D.Lgs. n. 196/2003 and subsequent amendments and GDPR
UE 2016/679).
</p>
<p
style=3D"font-family: Arial, Helvetica, sans-serif; font-size: 13px">If
you are not the intended recipient, please delete this message
and any attachments and advise the sender by return e -mail.
Thanks.
<br>
</p>
<hr>
</blockquote>
</body>
</html>
--------------2vNnIMSr3FGl80z0VNX0qCpi--
--------------ms000901000201010909020008
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC
DTAwggY0MIIEHKADAgECAhBAAZimBAJ19t4m6OTgn3OxMA0GCSqGSIb3DQEBCwUAMDoxCzAJ
BgNVBAYTAlVTMRIwEAYDVQQKEwlJZGVuVHJ1c3QxFzAVBgNVBAMTDlRydXN0SUQgQ0EgQTE0
MB4XDTI1MDgxNDAwMzg1N1oXDTI3MTEwMTAwMzc1N1owgcwxKDAmBgNVBAUTH0EwMTQxMEMw
MDAwMDE5OEE2MDQwMjY3MDAxMEYyNjIxGTAXBgNVBGETEE5UUlVTK05ZLTM1ODIyMzcxFTAT
BgNVBAoTDEF1cmlTdG9yIEluYzEZMBcGA1UEAxMQSmVmZnJleSBFIEFsdG1hbjEPMA0GA1UE
BBMGQWx0bWFuMRAwDgYDVQQqEwdKZWZmcmV5MSMwIQYJKoZIhvcNAQkBFhRqYWx0bWFuQGF1
cmlzdG9yLmNvbTELMAkGA1UEBhMCVVMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDKtXD1tqgXxlJvgI10FM0ZvyWukq2IeXgVhbgOk4k4PbRk1TvrGB04QatXac9soW7yHv6R
hoovQ+URaXBEpBYxOE8Tsx+XfKZNkGbWj9bEdWgi8HPb33rf8eKFuhjx1QEv/YtD7lGIp7Rh
KWC5kBfvyut8o3XJmJF0hCR1m663wsttrn89dwZczLU4JUjbTF0ukM0DbDk55ItDB4dXnW/u
RfhrVuemMvbDily+etLCWsuJjtrjRBCQ805eYRHq5LonX3oNLdXituSHXLKvq+uChgFN/veD
HKpeBnBWmoNtOQnV8fsq5NCz/WswIACeZj+xGmZsWx7fyuzee78ZePfBAgMBAAGjggGhMIIB
nTAMBgNVHRMBAf8EAjAAMA4GA1UdDwEB/wQEAwIE8DCBhAYIKwYBBQUHAQEEeDB2MDAGCCsG
AQUFBzABhiRodHRwOi8vY29tbWVyY2lhbC5vY3NwLmlkZW50cnVzdC5jb20wQgYIKwYBBQUH
MAKGNmh0dHA6Ly92YWxpZGF0aW9uLmlkZW50cnVzdC5jb20vY2VydHMvdHJ1c3RpZGNhYTE0
LnA3YzAfBgNVHSMEGDAWgBTC1ESZoHHPSFa+DI5oOFynt/dFvDAjBgNVHSAEHDAaMAkGB2eB
DAEFAwIwDQYLYIZIAYb5LwAGAgEwRQYDVR0fBD4wPDA6oDigNoY0aHR0cDovL3ZhbGlkYXRp
b24uaWRlbnRydXN0LmNvbS9jcmwvdHJ1c3RpZGNhYTE0LmNybDAfBgNVHREEGDAWgRRqYWx0
bWFuQGF1cmlzdG9yLmNvbTAdBgNVHQ4EFgQUY4JHedU4owyskKPvw4gOjSyBJZUwKQYDVR0l
BCIwIAYIKwYBBQUHAwIGCCsGAQUFBwMEBgorBgEEAYI3CgMMMA0GCSqGSIb3DQEBCwUAA4IC
AQCeOjCscMFctL6UG8WBsFMIOHc7MpbrX7EIvO34SGVKhrbqS1RTIBQiVVWnQ4VI6qVw/n9d
adUv4o1/F23s0uXE8/lGJAGn51kkw1xHU+0PGODOTWvAQOiPhSmaXG5xM4BgleroGggumd8f
HRSKFK7DIdWcMMNbS6LpMAOUfXYzNBvcHbAcjJMHQ7N8pNXdEQDB9c6yIw4paVD6XDE5VFhL
df6749jGqSWXpyTMjXzrPMaDyxKiNOtsUrdT/fh8+Xx84nGpwiV9PA9/cGSAPcAc/qMBgPb4
Qj9met/RUvCHPWr68Zlirgx48W/7TTZFhXKZg3U+zCj4ASOfLJ6WT4PPoM+eLHbB402WNMFk
QDmWBH4bMqUcbQWxarMxdQ/jHKTsJIkvg+rTCbWbDm7hgJbnPEZrJEghy69Opa9+F1HB90AQ
mb41N1PLZytu8pCGBJufyqjzNU0eyWkHJCwHDLFhoCENk/vujFCmsJUSh7a6ZMPSXf3PR4TP
Kkcgs9JBT0dyPGHEfC/Lp9ZHTGSO6zswK1BddBufYi3xqHNBO/s7ft6gpNvht7oKUhVcjM7E
mQCA6t2ok44PNfeG8rJZxiDv04IruCbzLFwkPczWS5uCIuP3PWCfVtMnUPDamMVWAr4Ui/s6
fy3TZbPUAPDjFRi7zpkFIKHlCS/HIHNR6Gr1lzCCBvQwggTcoAMCAQICEEABif/SaQvad8Lp
1U2SCE0wDQYJKoZIhvcNAQELBQAwSjELMAkGA1UEBhMCVVMxEjAQBgNVBAoTCUlkZW5UcnVz
dDEnMCUGA1UEAxMeSWRlblRydXN0IENvbW1lcmNpYWwgUm9vdCBDQSAxMB4XDTIzMDgxNjE5
Mjg0NloXDTMzMDgxMjE5Mjg0NVowOjELMAkGA1UEBhMCVVMxEjAQBgNVBAoTCUlkZW5UcnVz
dDEXMBUGA1UEAxMOVHJ1c3RJRCBDQSBBMTQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK
AoICAQDoqfW8senk2X/L7Viky0ZgZYnwlxqsE/vDQWARa1i7gZ0wRJ7ZOWIbjYDccsGFBhCb
8VLx1dershozyPcOizZ1LxAhstZhpz8KvKc4bHhu1+6ZJftmrDyAELLRu1gkPS0BvongGBin
xoTNo0XwafmS67jFRtYHe2VQSLvy0t9xRUsgdEeYgCUAnKO5eRVQMmBBNhnsTFtO5FzNmNKn
uw/TDcBbOpGrQ1FSCuOZTHw3njDtZGqiRXSruX3MCpV190CefwryeGLXCsawSz2wMQZkqtjY
V9Au73Zrqg1yDVj9KGKoRnJ8cUcg1Inxs/+Bo3xcM43y2h10yDrSWFTfvPSQhUJwYKHCYJSV
QLFbeH9vxFJeLlewivaKQMGEg8PpnjevzDu8PVVzr9gkWcLubhztussqdAPF+dvyXIYJb/7l
6idZkS4NeHAsrAtcv+UF+SGzSS5F28s376Kx35LUaJeOW4hQOjSj/118F9cyYAd2WlgGdBda
K2PSvH7aANZQfyEhNNMzk2GP83pHXXeXy+09LkTcIlgXr2rrXepxP+WBp+Ihu4Jh5uZWQkpG
UUNqKSjxIpUJ6sDIIgGIqSY/uBFSp2ff+4OLLS3Z+XQ9gBu1Szd3kQ8PrGXAI5DXayXjM9Yp
psHld3OojXhoOsLdCji+be0mAgvbNa6AaSJcT7RF3QIDAQABo4IB5DCCAeAwEgYDVR0TAQH/
BAgwBgEB/wIBADAOBgNVHQ8BAf8EBAMCAYYwgYkGCCsGAQUFBwEBBH0wezAwBggrBgEFBQcw
AYYkaHR0cDovL2NvbW1lcmNpYWwub2NzcC5pZGVudHJ1c3QuY29tMEcGCCsGAQUFBzAChjto
dHRwOi8vdmFsaWRhdGlvbi5pZGVudHJ1c3QuY29tL3Jvb3RzL2NvbW1lcmNpYWxyb290Y2Ex
LnA3YzAfBgNVHSMEGDAWgBTtRBnA0/AGi+6ke75C5yZUyI42djBfBgNVHSAEWDBWMFQGBFUd
IAAwTDBKBggrBgEFBQcCARY+aHR0cHM6Ly9zZWN1cmUuaWRlbnRydXN0LmNvbS9jZXJ0aWZp
Y2F0ZXMvcG9saWN5L3RzL2luZGV4Lmh0bWwwSgYDVR0fBEMwQTA/oD2gO4Y5aHR0cDovL3Zh
bGlkYXRpb24uaWRlbnRydXN0LmNvbS9jcmwvY29tbWVyY2lhbHJvb3RjYTEuY3JsMB0GA1Ud
DgQWBBTC1ESZoHHPSFa+DI5oOFynt/dFvDBBBgNVHSUEOjA4BggrBgEFBQcDAgYIKwYBBQUH
AwQGCisGAQQBgjcKAwwGCisGAQQBgjcUAgIGCisGAQQBgjcKAwQwDQYJKoZIhvcNAQELBQAD
ggIBAJXyFF1baV3jUq5o3Q5FIysADRg5knGSFzcliSyYTBd5YZ4FYFZSDxrQ25J87EFzq8q9
a1lQxNwcj2R3IFNfx5QWU6EApuGwiOgX9igx3EAJuOa8JnSoLUI5zKflmNqTVHSz3b94UQy/
MF+s8+OwbM8+FscUY0CxXRlOEETsW6MFXfliOSIEnQFmm5NraqzYHecXC8DJF6yTxbu1+101
T66oqkp9+EAvU+SXgSIcHDpNxAmbm6XcSQFwEZLOLSctCVeZzLsvCE1Ozr5hvEAstYh07Qm/
FtuZ+M540l2qSydFaI4yD7uH6/SsjQAARQXYzezBauwR8YOTS7PUDWejFUpHzPy4q2JdYdU2
jYTst4G7gW0+y6EQyXIiSEEaKePUrnIiRImK6ySZXDTB7A+td6giMATY61GcJUS9kdCHZ4br
FJiLBg9az11c15e5SbS2bCNAMOIK6NwakjsWmh2jX+C6LJX37ehqQT0GVekYT4nGMBH89MiQ
1kFnIQcIWTagA/QqFHMhHFlUH5mWyby/6alKXu0ZeODdBRR/Tn39K6awTCVSbQH8P+KbF5kM
ky9b7IFzJI/fwxr/ZVoEKCj0aoicm2TTsXgqRUI7MgiLU6hE5ersxFh5yM2IBc8za+kvkB7S
eXPhzloFqmayuM2QfrqjsX1F0CopS11iOE4QVaJmMYIEATCCA/0CAQEwTjA6MQswCQYDVQQG
EwJVUzESMBAGA1UEChMJSWRlblRydXN0MRcwFQYDVQQDEw5UcnVzdElEIENBIEExNAIQQAGY
pgQCdfbeJujk4J9zsTANBglghkgBZQMEAgEFAKCCAoQwGAYJKoZIhvcNAQkDMQsGCSqGSIb3
DQEHATAcBgkqhkiG9w0BCQUxDxcNMjYwNTA4MTEyMDUwWjAvBgkqhkiG9w0BCQQxIgQgR1Q6
rgVCYsVnTja1RHepZx18ODLhxO750AiyhajFk0YwXQYJKwYBBAGCNxAEMVAwTjA6MQswCQYD
VQQGEwJVUzESMBAGA1UEChMJSWRlblRydXN0MRcwFQYDVQQDEw5UcnVzdElEIENBIEExNAIQ
QAGYpgQCdfbeJujk4J9zsTBfBgsqhkiG9w0BCRACCzFQoE4wOjELMAkGA1UEBhMCVVMxEjAQ
BgNVBAoTCUlkZW5UcnVzdDEXMBUGA1UEAxMOVHJ1c3RJRCBDQSBBMTQCEEABmKYEAnX23ibo
5OCfc7EwggFXBgkqhkiG9w0BCQ8xggFIMIIBRDALBglghkgBZQMEASowCwYJYIZIAWUDBAEC
MAoGCCqGSIb3DQMHMA0GCCqGSIb3DQMCAgEFMA0GCCqGSIb3DQMCAgEFMAcGBSsOAwIHMA0G
CCqGSIb3DQMCAgEFMAcGBSsOAwIaMAsGCWCGSAFlAwQCATALBglghkgBZQMEAgIwCwYJYIZI
AWUDBAIDMAsGCWCGSAFlAwQCBDALBglghkgBZQMEAgcwCwYJYIZIAWUDBAIIMAsGCWCGSAFl
AwQCCTALBglghkgBZQMEAgowCwYJKoZIhvcNAQEBMAsGCSuBBRCGSD8AAjAIBgYrgQQBCwAw
CAYGK4EEAQsBMAgGBiuBBAELAjAIBgYrgQQBCwMwCwYJK4EFEIZIPwADMAgGBiuBBAEOADAI
BgYrgQQBDgEwCAYGK4EEAQ4CMAgGBiuBBAEOAzANBgkqhkiG9w0BAQEFAASCAQAX/9BMi/dH
OdQc2ClH92AR5Zk3q5mfQXTH7HDgRxfHFC0SBhHa2h+iwqZX2DvI63lBk3huBprZKgYD1i8G
n2gw53Osmma+FBWIWrZF3Dz/nvmMX00cfyj8hrfkrDZY7qA56GN0nLOLJoZUmvMRFjuNoNGw
xteS20U9AY88oX4PhXZ8N9UE4GkObzxJy/d6XZH+ZyQkXf247yluOL3HEdYuOVBlK9AUHQFU
IL39BuG/wgPzp2LA7FhvWn5VQIBR9KmwS+D3i6pus81Y9jYO35QSqXKRCJTqzy9HompRzZJ9
lF/+JHKV5enC6H3WMXzLdHjV4LPjn1NtjbHwRRk+JuUcAAAAAAAA
--------------ms000901000201010909020008--