In the Linux kernel, the following vulnerability has been resolved:
ocfs2: fix race between searching chunks and release journal_head from buffer_head
Encountered a race between ocfs2_test_bg_bit_allocatable() and jbd2_journal_put_journal_head() resulting in the below vmcore.
PID: 106879 TASK: ffff880244ba9c00 CPU: 2 COMMAND: "loop3" Call trace: panic oops_end no_context __bad_area_nosemaphore bad_area_nosemaphore __do_page_fault do_page_fault page_fault [exception RIP: ocfs2_block_group_find_clear_bits+316] ocfs2_block_group_find_clear_bits [ocfs2] ocfs2_cluster_group_search [ocfs2] ocfs2_search_chain [ocfs2] ocfs2_claim_suballoc_bits [ocfs2] __ocfs2_claim_clusters [ocfs2] ocfs2_claim_clusters [ocfs2] ocfs2_local_alloc_slide_window [ocfs2] ocfs2_reserve_local_alloc_bits [ocfs2] ocfs2_reserve_clusters_with_limit [ocfs2] ocfs2_reserve_clusters [ocfs2] ocfs2_lock_refcount_allocators [ocfs2] ocfs2_make_clusters_writable [ocfs2] ocfs2_replace_cow [ocfs2] ocfs2_refcount_cow [ocfs2] ocfs2_file_write_iter [ocfs2] lo_rw_aio loop_queue_work kthread_worker_fn kthread ret_from_fork
When ocfs2_test_bg_bit_allocatable() called bh2jh(bg_bh), the bg_bh->b_private NULL as jbd2_journal_put_journal_head() raced and released the jounal head from the buffer head. Needed to take bit lock for the bit 'BH_JournalHead' to fix this race.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Suse | — | Upgrade dtb-mediatekUpgrade kernel-azure-optionalUpgrade dtb-exynosUpgrade kernel-rt-extraUpgrade gfs2-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-devel-rtUpgrade kernel-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-syms-azureUpgrade gfs2-kmp-64kbUpgrade kernel-default-extraUpgrade dtb-amazonUpgrade kernel-source-azureUpgrade kernel-64kb-livepatch-develUpgrade dtb-amlogicUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-rockchipUpgrade kernel-debug-livepatch-develUpgrade dtb-caviumUpgrade kernel-default-optionalUpgrade kernel-rt-develUpgrade kernel-obs-qaUpgrade kernel-rt-vdsoUpgrade kernel-sourceUpgrade kselftests-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-default-develUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-develUpgrade dtb-apmUpgrade kernel-macrosUpgrade gfs2-kmp-rtUpgrade dtb-qcomUpgrade dlm-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-azure-livepatch-develUpgrade dtb-alteraUpgrade kernel-preemptUpgrade dtb-armUpgrade dtb-lgUpgrade dtb-xilinxUpgrade kernel-kvmsmallUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-appleUpgrade kernel-debug-vdsoUpgrade dtb-renesasUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-64kb-optionalUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-source-vanillaUpgrade dtb-sprdUpgrade kernel-debug-develUpgrade kernel-debugUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-defaultUpgrade kernel-symsUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade dtb-hisiliconUpgrade kernel-default-livepatchUpgrade kernel-preempt-develUpgrade kernel-docs-htmlUpgrade dtb-marvellUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-azure-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-azureUpgrade dlm-kmp-azureUpgrade kernel-docsUpgrade ocfs2-kmp-azureUpgrade dtb-broadcomUpgrade dtb-socionextUpgrade kernel-default-livepatch-develUpgrade kernel-develUpgrade kernel-syms-rtUpgrade dtb-nvidiaUpgrade dtb-amdUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-source-rtUpgrade kernel-64kb-develUpgrade kernel-64kb-extra | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-azure-fde-5.15No solution exists | Jun 26, 2025 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub