In the Linux kernel, the following vulnerability has been resolved:
ocfs2: fix race between searching chunks and release journal_head from buffer_head
Encountered a race between ocfs2_test_bg_bit_allocatable() and jbd2_journal_put_journal_head() resulting in the below vmcore.
PID: 106879 TASK: ffff880244ba9c00 CPU: 2 COMMAND: "loop3" Call trace: panic oops_end no_context __bad_area_nosemaphore bad_area_nosemaphore __do_page_fault do_page_fault page_fault [exception RIP: ocfs2_block_group_find_clear_bits+316] ocfs2_block_group_find_clear_bits [ocfs2] ocfs2_cluster_group_search [ocfs2] ocfs2_search_chain [ocfs2] ocfs2_claim_suballoc_bits [ocfs2] __ocfs2_claim_clusters [ocfs2] ocfs2_claim_clusters [ocfs2] ocfs2_local_alloc_slide_window [ocfs2] ocfs2_reserve_local_alloc_bits [ocfs2] ocfs2_reserve_clusters_with_limit [ocfs2] ocfs2_reserve_clusters [ocfs2] ocfs2_lock_refcount_allocators [ocfs2] ocfs2_make_clusters_writable [ocfs2] ocfs2_replace_cow [ocfs2] ocfs2_refcount_cow [ocfs2] ocfs2_file_write_iter [ocfs2] lo_rw_aio loop_queue_work kthread_worker_fn kthread ret_from_fork
When ocfs2_test_bg_bit_allocatable() called bh2jh(bg_bh), the bg_bh->b_private NULL as jbd2_journal_put_journal_head() raced and released the jounal head from the buffer head. Needed to take bit lock for the bit 'BH_JournalHead' to fix this race.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Suse | — | Upgrade dtb-amlogicUpgrade kernel-preemptUpgrade kernel-devel-azureUpgrade ocfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-obs-qaUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-rtUpgrade dtb-caviumUpgrade kernel-syms-azureUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-azureUpgrade dtb-xilinxUpgrade cluster-md-kmp-defaultUpgrade kernel-source-azureUpgrade dtb-alteraUpgrade dtb-mediatekUpgrade kernel-rt-extraUpgrade dtb-amazonUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade kernel-devel-rtUpgrade kernel-azure-develUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-azureUpgrade dtb-apmUpgrade kernel-64kbUpgrade kernel-default-extraUpgrade dtb-exynosUpgrade dtb-rockchipUpgrade kernel-rt-develUpgrade gfs2-kmp-64kbUpgrade dtb-lgUpgrade kernel-kvmsmall-develUpgrade dtb-qcomUpgrade kernel-default-optionalUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-default-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-azure-optionalUpgrade dtb-armUpgrade kernel-azure-extraUpgrade dtb-sprdUpgrade reiserfs-kmp-defaultUpgrade kernel-azureUpgrade kernel-64kb-develUpgrade reiserfs-kmp-64kbUpgrade kernel-develUpgrade dtb-socionextUpgrade dlm-kmp-azureUpgrade kernel-docsUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-64kb-extraUpgrade dtb-amdUpgrade kernel-source-rtUpgrade dtb-allwinnerUpgrade kernel-debugUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade dtb-hisiliconUpgrade dtb-marvellUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debugUpgrade gfs2-kmp-defaultUpgrade kernel-symsUpgrade dlm-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-64kb-optionalUpgrade dtb-appleUpgrade dlm-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-debug-vdsoUpgrade kernel-source-vanillaUpgrade kernel-azure-vdsoUpgrade dtb-renesasUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade dtb-freescaleUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-develUpgrade kselftests-kmp-defaultUpgrade kernel-preempt-devel | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | No solution existsUpgrade linux-azure-fde-5.15 | Jun 26, 2025 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub