In the Linux kernel, the following vulnerability has been resolved:
ext4: fix i_data_sem unlock order in ext4_ind_migrate()
Fuzzing reports a possible deadlock in jbd2_log_wait_commit.
This issue is triggered when an EXT4_IOC_MIGRATE ioctl is set to require synchronous updates because the file descriptor is opened with O_SYNC. This can lead to the jbd2_journal_stop() function calling jbd2_might_wait_for_commit(), potentially causing a deadlock if the EXT4_IOC_MIGRATE call races with a write(2) system call.
This problem only arises when CONFIG_PROVE_LOCKING is enabled. In this case, the jbd2_might_wait_for_commit macro locks jbd2_handle in the jbd2_journal_stop function while i_data_sem is locked. This triggers lockdep because the jbd2_journal_start function might also lock the same jbd2_handle simultaneously.
Found by Linux Verification Center (linuxtesting.org) with syzkaller.
Rule: add
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.227-219.884Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.15.168-114.166Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade python-perfUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-tools-devel | Mar 14, 2025 | Oct 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.115-126.197Upgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfo | Mar 27, 2025 | Oct 21, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 11, 2024 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Feb 11, 2025 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perf | Feb 11, 2025 | Oct 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 17, 2024 | Oct 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | May 15, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1023-awsUpgrade linux-image-oracle-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-4.4.0-1119-fipsUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-4.4.0-274-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1078-azureUpgrade linux-image-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-gcp-fips-4.15Upgrade linux-image-awsUpgrade linux-image-ibmUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-azure-nvidiaUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-4.15.0-2124-aws-fipsUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-1048-iotUpgrade linux-image-4.15.0-2087-gcp-fipsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.4.0-1149-awsUpgrade linux-image-5.4.0-1140-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-4.15.0-1141-fipsUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-4.4.0-1150-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-azure-cvmUpgrade linux-image-4.15.0-1179-gcpUpgrade linux-image-5.15.0-127-genericUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-aws-fips-4.15Upgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-4.4.0-274-genericUpgrade linux-image-bluefieldUpgrade linux-image-azureUpgrade linux-image-6.8.0-54-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-4.15.0-1194-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-azure-fips-4.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-aws-hweUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-intelUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-4.15.0-243-genericUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-4.15.0-2104-azure-fipsUpgrade linux-image-4.15.0-1186-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-oem-24.04bUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-6.8Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-6.8.0-1024-oemUpgrade linux-image-4.15.0-243-lowlatencyUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-208-genericUpgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-gkeopUpgrade linux-image-oemUpgrade linux-image-4.15.0-1168-kvmUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-realtimeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-aws-4.15Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.4.0-1187-awsUpgrade linux-image-5.4.0-1145-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-gcp-4.15Upgrade linux-image-oem-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-aws-lts-18.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1073-awsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-gcp-64kUpgrade linux-image-oracle-4.15Upgrade linux-image-azure-4.15Upgrade linux-image-4.15.0-1148-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-fipsUpgrade linux-image-generic | Dec 18, 2024 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub