In the Linux kernel, the following vulnerability has been resolved:
sysv: don't call sb_bread() with pointers_lock held
syzbot is reporting sleep in atomic context in SysV filesystem [1], for sb_bread() is called with rw_spinlock held.
A "write_lock(&pointers_lock) => read_lock(&pointers_lock) deadlock" bug and a "sb_bread() with write_lock(&pointers_lock)" bug were introduced by "Replace BKL for chain locking with sysvfs-private rwlock" in Linux 2.5.12.
Then, "[PATCH] err1-40: sysvfs locking fix" in Linux 2.6.8 fixed the former bug by moving pointers_lock lock to the callers, but instead introduced a "sb_bread() with read_lock(&pointers_lock)" bug (which made this problem easier to hit).
Al Viro suggested that why not to do like get_branch()/get_block()/ find_shared() in Minix filesystem does. And doing like that is almost a revert of "[PATCH] err1-40: sysvfs locking fix" except that get_branch() from with find_shared() is called without write_lock(&pointers_lock).
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 27, 2024 | May 19, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 19, 2024 |
| Suse | — | Upgrade dtb-sprdUpgrade dtb-rockchipUpgrade kernel-azure-optionalUpgrade dtb-xilinxUpgrade kernel-rt_debug-develUpgrade kernel-64kb-develUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade dtb-renesasUpgrade dtb-caviumUpgrade kernel-sourceUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-develUpgrade dtb-allwinnerUpgrade kernel-source-azureUpgrade gfs2-kmp-defaultUpgrade dtb-mediatekUpgrade dlm-kmp-rtUpgrade kernel-default-develUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-debugUpgrade ocfs2-kmp-azureUpgrade dtb-amazonUpgrade gfs2-kmp-azureUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade dtb-qcomUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-debug-vdsoUpgrade dtb-alteraUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade kernel-64kbUpgrade dtb-lgUpgrade kselftests-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade kernel-default-base-rebuildUpgrade dtb-socionextUpgrade dtb-nvidiaUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade kselftests-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-rt-vdsoUpgrade kernel-debug-develUpgrade dlm-kmp-azureUpgrade kernel-default-baseUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmallUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dtb-marvellUpgrade kernel-defaultUpgrade kernel-debug-livepatch-develUpgrade dtb-appleUpgrade kernel-docs-htmlUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade kernel-syms-rtUpgrade dtb-apmUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade dtb-amlogicUpgrade kernel-docsUpgrade kernel-source-rtUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade kernel-azure-develUpgrade dtb-armUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-optionalUpgrade gfs2-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-rt_debug-vdso | Jun 13, 2024 | May 19, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-38-genericUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-oem-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-azure-cvmUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-oracle-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1011-awsUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-lpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-azure-fdeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-generic-64kUpgrade linux-image-ibm-classicUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-116-genericUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-ibmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-bluefieldUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-intelUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-intel-iotg | Jul 12, 2024 | May 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub