In the Linux kernel, the following vulnerability has been resolved:
sysv: don't call sb_bread() with pointers_lock held
syzbot is reporting sleep in atomic context in SysV filesystem [1], for sb_bread() is called with rw_spinlock held.
A "write_lock(&pointers_lock) => read_lock(&pointers_lock) deadlock" bug and a "sb_bread() with write_lock(&pointers_lock)" bug were introduced by "Replace BKL for chain locking with sysvfs-private rwlock" in Linux 2.5.12.
Then, "[PATCH] err1-40: sysvfs locking fix" in Linux 2.6.8 fixed the former bug by moving pointers_lock lock to the callers, but instead introduced a "sb_bread() with read_lock(&pointers_lock)" bug (which made this problem easier to hit).
Al Viro suggested that why not to do like get_branch()/get_block()/ find_shared() in Minix filesystem does. And doing like that is almost a revert of "[PATCH] err1-40: sysvfs locking fix" except that get_branch() from with find_shared() is called without write_lock(&pointers_lock).
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 27, 2024 | May 19, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 19, 2024 |
| Suse | — | Upgrade kernel-default-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-azure-develUpgrade kernel-debug-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-debug-livepatch-develUpgrade dtb-appleUpgrade kernel-rt-optionalUpgrade kernel-rt_debugUpgrade dtb-apmUpgrade kernel-macrosUpgrade kernel-64kb-optionalUpgrade kernel-azure-extraUpgrade kernel-64kb-livepatch-develUpgrade dtb-broadcomUpgrade dtb-amlogicUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade kernel-docsUpgrade kernel-source-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-armUpgrade dtb-marvellUpgrade kernel-devel-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-nvidiaUpgrade ocfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade kernel-rt-vdsoUpgrade kernel-default-extraUpgrade dtb-socionextUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-default-baseUpgrade gfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-defaultUpgrade dtb-lgUpgrade dtb-rockchipUpgrade gfs2-kmp-defaultUpgrade kernel-64kbUpgrade kernel-rt-develUpgrade kernel-sourceUpgrade dtb-allwinnerUpgrade kernel-source-azureUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-64kbUpgrade dtb-caviumUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-xilinxUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-64kb-develUpgrade kernel-develUpgrade kernel-rt-extraUpgrade kernel-syms-azureUpgrade kernel-azureUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade kernel-rt-livepatchUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-rtUpgrade dtb-mediatekUpgrade dtb-sprdUpgrade dtb-renesasUpgrade kernel-source-vanillaUpgrade dtb-freescaleUpgrade kernel-default-vdsoUpgrade dtb-exynosUpgrade dtb-hisiliconUpgrade dtb-qcomUpgrade cluster-md-kmp-azureUpgrade dtb-alteraUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-rtUpgrade kernel-debugUpgrade kernel-azure-optionalUpgrade kernel-default-optionalUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-devel-rtUpgrade kernel-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade dtb-amazonUpgrade ocfs2-kmp-azure | Jun 13, 2024 | May 19, 2024 |
| Ubuntu | — | Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1068-azureUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-intelUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1008-oemUpgrade linux-image-aws-lts-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-raspi2Upgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1011-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-gkeop-5.4Upgrade linux-image-intel-iotgUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-bluefieldUpgrade linux-image-azure-fdeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspiUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-awsUpgrade linux-image-azure-cvmUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1010-azureUpgrade linux-image-oemUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1065-awsUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-5.4.0-1040-iotUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-gkeUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-gkeop-5.15Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.15.0-1065-gcp | Jul 12, 2024 | May 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub