In the Linux kernel, the following vulnerability has been resolved:
ext4: fix timer use-after-free on failed mount
Syzbot has found an ODEBUG bug in ext4_fill_super
The del_timer_sync function cancels the s_err_report timer, which reminds about filesystem errors daily. We should guarantee the timer is no longer active before kfree(sbi).
When filesystem mounting fails, the flow goes to failed_mount3, where an error occurs when ext4_stop_mmpd is called, causing a read I/O failure. This triggers the ext4_handle_error function that ultimately re-arms the timer, leaving the s_err_report timer active before kfree(sbi) is called.
Fix the issue by canceling the s_err_report timer after calling ext4_stop_mmpd.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.230-223.885Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.233-223.887Upgrade perfUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.355-275.603Upgrade perf-debuginfoUpgrade kernel-livepatch-5.10.234-225.910Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.178-120.178Upgrade python-perf-debuginfoUpgrade bpftoolUpgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.228-219.884Upgrade kernel-livepatch-5.10.227-219.884 | Feb 4, 2025 | Oct 21, 2024 |
| Amazon_linux | — | Upgrade kernel | Mar 18, 2025 | Oct 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade kernelUpgrade perfUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.119-129.201Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.115-126.197Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.112-124.190Upgrade kernel-modules-extra-common | Feb 17, 2025 | Oct 21, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Dec 2, 2024 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools | Feb 11, 2025 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelists | Feb 11, 2025 | Oct 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | Oct 21, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | May 15, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-gkeopUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1023-awsUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-144-fipsUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-fips-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-5.15.0-1094-azureUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-raspiUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-20.04cUpgrade linux-image-intelUpgrade linux-image-ibmUpgrade linux-image-fipsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-6.8.0-54-genericUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-genericUpgrade linux-image-oracle-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-azureUpgrade linux-image-generic-64k-5.15Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-realtimeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-azure-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-azure-cvmUpgrade linux-image-aws-5.15Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-oracleUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-azure-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-virtual-5.15Upgrade linux-image-6.8.0-57-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-virtualUpgrade linux-image-raspi-nolpaeUpgrade linux-image-realtime-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-6.8.0-54-lowlatency-64k | Feb 20, 2025 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub