In the Linux kernel, the following vulnerability has been resolved:
ext4: fix access to uninitialised lock in fc replay path
The following kernel trace can be triggered with fstest generic/629 when executed against a filesystem with fast-commit feature enabled:
INFO: trying to register non-static key. The code is fine but needs lockdep annotation, or maybe you didn't initialize this object before use? turning off the locking correctness validator. CPU: 0 PID: 866 Comm: mount Not tainted 6.10.0+ #11 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.2-3-gd478f380-prebuilt.qemu.org 04/01/2014 Call Trace: <TASK> dump_stack_lvl+0x66/0x90 register_lock_class+0x759/0x7d0 __lock_acquire+0x85/0x2630 ? __find_get_block+0xb4/0x380 lock_acquire+0xd1/0x2d0 ? __ext4_journal_get_write_access+0xd5/0x160 _raw_spin_lock+0x33/0x40 ? __ext4_journal_get_write_access+0xd5/0x160 __ext4_journal_get_write_access+0xd5/0x160 ext4_reserve_inode_write+0x61/0xb0 __ext4_mark_inode_dirty+0x79/0x270 ? ext4_ext_replay_set_iblocks+0x2f8/0x450 ext4_ext_replay_set_iblocks+0x330/0x450 ext4_fc_replay+0x14c8/0x1540 ? jread+0x88/0x2e0 ? rcu_is_watching+0x11/0x40 do_one_pass+0x447/0xd00 jbd2_journal_recover+0x139/0x1b0 jbd2_journal_load+0x96/0x390 ext4_load_and_init_journal+0x253/0xd40 ext4_fill_super+0x2cc6/0x3180 ...
In the replay path there's an attempt to lock sbi->s_bdev_wb_lock in function ext4_check_bdev_write_error(). Unfortunately, at this point this spinlock has not been initialized yet. Moving it's initialization to an earlier point in __ext4_fill_super() fixes this splat.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.128-136.201Upgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-modules-extra-commonUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf | Feb 26, 2025 | Oct 21, 2024 |
| Debian | — | Upgrade linux | Feb 10, 2025 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Feb 11, 2025 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Feb 11, 2025 | Oct 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | May 15, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-oracle-64kUpgrade linux-image-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04aUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-azure-nvidiaUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-oem-24.04aUpgrade linux-image-awsUpgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-oem-24.04bUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.8.0-54-genericUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-gcp-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-virtualUpgrade linux-image-gkeUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-genericUpgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-6.8.0-1023-awsUpgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-realtimeUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-generic-64k-hwe-22.04 | Feb 20, 2025 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub