In the Linux kernel, the following vulnerability has been resolved:
ext4: add error checking to ext4_ext_replay_set_iblocks()
If the call to ext4_map_blocks() fails due to an corrupted file system, ext4_ext_replay_set_iblocks() can get stuck in an infinite loop. This could be reproduced by running generic/526 with a file system that has inline_data and fast_commit enabled. The system will repeatedly log to the console:
EXT4-fs warning (device dm-3): ext4_block_to_path:105: block 1074800922 > max in inode 131076
and the stack that it gets stuck in is:
ext4_block_to_path+0xe3/0x130 ext4_ind_map_blocks+0x93/0x690 ext4_map_blocks+0x100/0x660 skip_hole+0x47/0x70 ext4_ext_replay_set_iblocks+0x223/0x440 ext4_fc_replay_inode+0x29e/0x3b0 ext4_fc_replay+0x278/0x550 do_one_pass+0x646/0xc10 jbd2_journal_recover+0x14a/0x270 jbd2_journal_load+0xc4/0x150 ext4_load_journal+0x1f3/0x490 ext4_fill_super+0x22d4/0x2c00
With this patch, generic/526 still fails, but system is no longer locking up in a tight loop. It's likely the root casue is that fast_commit replay is corrupting file systems with inline_data, and we probably need to add better error handling in the fast commit replay code path beyond what is done here, which essentially just breaks the infinite loop without reporting the to the higher levels of the code.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.75-79.358Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade bpftool | Dec 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-develUpgrade kernel-azure-extraUpgrade dtb-xilinxUpgrade kernel-docsUpgrade kernel-64kb-develUpgrade cluster-md-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-source-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmallUpgrade dtb-appleUpgrade kernel-default-baseUpgrade dtb-mediatekUpgrade kernel-default-extraUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-64kb-optionalUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-macrosUpgrade dtb-armUpgrade kernel-rt-livepatchUpgrade kernel-default-develUpgrade kernel-symsUpgrade kernel-default-optionalUpgrade dtb-allwinnerUpgrade dtb-amazonUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-defaultUpgrade kernel-default-vdsoUpgrade dtb-amdUpgrade kernel-debug-develUpgrade dtb-lgUpgrade dtb-renesasUpgrade kernel-64kbUpgrade dtb-exynosUpgrade kernel-default-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-sourceUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-devel-azureUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-rt-develUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade dtb-hisiliconUpgrade kselftests-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-rt_debugUpgrade kernel-azureUpgrade kernel-rt_debug-develUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-azure-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade dtb-sprdUpgrade kernel-rtUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade gfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-caviumUpgrade dtb-socionextUpgrade kernel-rt-livepatch-develUpgrade kernel-defaultUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-debug-livepatch-develUpgrade dtb-alteraUpgrade gfs2-kmp-azureUpgrade kernel-source-rtUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade kselftests-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatchUpgrade dtb-rockchipUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-buildUpgrade dtb-amlogicUpgrade kernel-source-vanilla | Aug 9, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub