In the Linux kernel, the following vulnerability has been resolved:
ext4: don't set SB_RDONLY after filesystem errors
When the filesystem is mounted with errors=remount-ro, we were setting SB_RDONLY flag to stop all filesystem modifications. We knew this misses proper locking (sb->s_umount) and does not go through proper filesystem remount procedure but it has been the way this worked since early ext2 days and it was good enough for catastrophic situation damage mitigation. Recently, syzbot has found a way (see link) to trigger warnings in filesystem freezing because the code got confused by SB_RDONLY changing under its hands. Since these days we set EXT4_FLAGS_SHUTDOWN on the superblock which is enough to stop all filesystem modifications, modifying SB_RDONLY shouldn't be needed. So stop doing that.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.15.168-114.166Upgrade kernel-tools-develUpgrade kernel-develUpgrade perfUpgrade kernel | Mar 14, 2025 | Nov 8, 2024 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-tools-develUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.115-126.197Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel | Mar 27, 2025 | Nov 8, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 11, 2024 | Nov 8, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | May 15, 2025 | Nov 8, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-24.04bUpgrade linux-image-oem-20.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1025-awsUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1024-nvidiaUpgrade linux-image-5.15.0-127-genericUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1025-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1024-nvidia-lowlatencyUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-6.8.0-56-lowlatency-64kUpgrade linux-image-6.8.0-1024-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1026-gcp-64kUpgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-56-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-56-generic-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-6.8.0-1022-oracle-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.15.0-1073-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1021-gkeUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-azure-nvidiaUpgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-6.8.0-1008-gkeopUpgrade linux-image-oracle-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-6.8.1-1018-realtimeUpgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-awsUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-22.04aUpgrade linux-image-azure-cvmUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1078-azureUpgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1026-gcpUpgrade linux-image-6.8.0-1024-nvidia-64kUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.8.0-56-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-gke-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.8.0-1022-oracleUpgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-raspiUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-gcpUpgrade linux-image-azure | Dec 18, 2024 | Nov 8, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Nov 8, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub